>_ the cyber track
Cyber Track Blog
Write-ups, attack paths and defensive notes on Active Directory, Linux, Windows and web security.
Featured articles
-
Linux Log Analysis for Defenders: auth.log, journalctl, and auditd
The Linux security model, where Linux logs live, and how auditd turns a server into a system you can investigate. Module 5 of The Complete Blue Team Course.
-
What Is a SIEM? Log Management and Security Monitoring Explained
What a SIEM actually does, how to write queries that matter, and how to manage log…
-
MITRE ATT&CK for Defenders: Mapping Detections to Techniques
How blue teams use MITRE ATT&CK to describe attacker behavior, track detection coverage, and build detections…
-
Threat Intelligence for Defenders: Turning Intel into Detections
What threat intelligence is for, the strategic, operational and tactical levels, and how defenders turn intel…
Browse all articles
-
Windows Updates / Patch Tuesday
Keeping Windows Updated: Why Patch Tuesday Actually Matters “I’ll update it later” is one of the most common — and most risky…
-
Strong Passwords & Windows Hello
Strong Passwords and Windows Hello: A Practical Setup Guide Passwords remain the weakest link in most people’s security setup — not because…
-
BitLocker Encryption
Setting Up BitLocker to Encrypt Your Windows Drive If your laptop were lost or stolen tomorrow, would whoever found it be able…
-
Spotting Phishing Emails
How to Spot a Phishing Email Before It Costs You Phishing remains one of the most effective attack methods in existence —…
-
Windows Defender Firewall
Why You Should Enable Windows Defender Firewall (and How to Do It Right) If you’ve ever skipped past a firewall notification on…
-
JWT Security
JWT Security: Common Vulnerabilities and How to Exploit (and Fix) Them JSON Web Tokens (JWTs) are a widely used way to represent…
-
SSRF
SSRF (Server-Side Request Forgery) Explained: How Attackers Abuse Trust Server-Side Request Forgery (SSRF) happens when an attacker can make a server send…
-
Security Misconfiguration
Security Misconfiguration: The Silent Web Vulnerability Nobody Talks About Security Misconfiguration isn’t one specific bug — it’s a whole category of avoidable…
-
IDOR
Insecure Direct Object References (IDOR): A Beginner’s Guide An Insecure Direct Object Reference (IDOR) happens when an application exposes a direct reference…