12 min read
0
Using Hydra to see how it logs in SIEMS
For this part of the project, I used Hydra to simulate a brute force attack and observe how those login…
Latest Posts
7 min read
0
Locking Down Linux: SSH Hardening, Brute Force Testing & MFA
Ryan Robledo · April 2026 1. Introduction SSH is one of the most powerful tools on any Linux system —…
6 min read
0
Catching Mimikatz Red-Handed: Deploying a Wazuh SIEM and Watching Windows Defender Do Its Job
1. Introduction If you’d asked me a month ago what the coolest part of security engineering was, I probably would’ve…
6 min read
0
Deceiving the Attacker: Building an AI-Powered Honeypot with Beelzebub
In cybersecurity, understanding how attackers think is just as important as defending against them. In this project, I built and…
5 min read
0
Deploying a SIEM: Catching Credential Thieves in the Act with Wazuh and Sysmon
By Roberto Diaz Whoami Hi, I’m Roberto Diaz. I’ve always been drawn to technology, but I specifically gravitated toward cybersecurity…
7 min read
0
From Silence to SIEM: Unmasking the Invisible Adversary
This project demonstrates how a Security Operations Center (SOC) transforms raw web traffic into actionable intelligence. By simulating attacks from…
6 min read
0
Stop Flying Blind: Why You Need to Supercharge Your Windows Event Logs
In the world of cybersecurity, logs are your “black box” flight recorder. When a system is compromised, the first thing…
6 min read
0
From Endpoint to SIEM: Correlating Detections, Baselines, and Reconnaissance with Wazuh
Modern security operations centers don’t fail because of a lack of data, they have issues because there is so much…
7 min read
0
Lessons in Sysmon Troubleshooting and Custom Wazuh Rule-Tuning
1. Introduction Most ransomware defenses are reactive—they wait for a known signature to appear. In this project, I flipped the…
7 min read
0
From Junior to SIEM: My First Hands-On Lab, Configuration Mysteries, and 27,000 Alerts
When I began searching for my first hands-on cybersecurity project as a junior analyst, SIEM monitoring seemed like the ideal…