>_ the cyber track
Cyber Track Blog
Write-ups, attack paths and defensive notes on Active Directory, Linux, Windows and web security.
Featured articles
-
Linux Log Analysis for Defenders: auth.log, journalctl, and auditd
The Linux security model, where Linux logs live, and how auditd turns a server into a system you can investigate. Module 5 of The Complete Blue Team Course.
-
What Is a SIEM? Log Management and Security Monitoring Explained
What a SIEM actually does, how to write queries that matter, and how to manage log…
-
MITRE ATT&CK for Defenders: Mapping Detections to Techniques
How blue teams use MITRE ATT&CK to describe attacker behavior, track detection coverage, and build detections…
-
Threat Intelligence for Defenders: Turning Intel into Detections
What threat intelligence is for, the strategic, operational and tactical levels, and how defenders turn intel…
Browse all articles
-
SELinux and AppArmor: Mandatory Access Control for Linux Defense in Depth
1. Introduction Traditional Unix permissions answer whether a user or group may access a file. Mandatory Access Control adds another policy layer…
-
Linux Package Security: Repositories, Signatures, Updates, and Supply-Chain Risk
1. Introduction Linux package managers make system maintenance efficient by resolving dependencies, validating metadata, and installing software from repositories. The same mechanism…
-
Linux Incident Response Triage: Processes, Network, Users, Logs, and Persistence
1. Introduction When a Linux host is suspected of compromise, the first minutes matter. Responders need a repeatable triage process that captures…
-
Linux File Permissions: chmod, chown, umask, and the Security Model
1. Introduction Linux permissions are one of the first security controls applied to almost every file, directory, device, socket, and executable on…
-
Safe Browsing Basics windows
How to Safely Browse the Web on Windows: Browser Security Basics The web browser is the single most-used application on most Windows…
-
User Account Control (UAC)
Understanding User Account Control (UAC) and Why It Matters That gray screen asking “Do you want to allow this app to make…
-
backup restore windows
How to Use Windows Backup to Protect Your Data Ransomware, hardware failure, accidental deletion, theft — the causes vary, but the outcome…
-
Windows Privacy Settings
How to Check if Your Windows PC Has Been Compromised Not every infection announces itself with a ransom note or a crashed…
-
Signs Your PC Is Compromised
How to Check if Your Windows PC Has Been Compromised Not every infection announces itself with a ransom note or a crashed…