have fun with Zeek
What a wonderful tool zeek is!
This is the thought I had after realising the versatility and potential of the instrument.A network security monitoring tool, I needed this to perform a task. I...
Setting up Cloudflare Full (Strict) SSL/TLS on Apache
Cloudflare’s Full (Strict) SSL/TLS mode ensures that traffic is encrypted between visitors and Cloudflare and between Cloudflare and your origin server, using a certificate that Cloudflare trusts. I...
Overview: "OWASP Top 10 for LLM Applications 2025: A Comprehensive Guide"
Disclaimer: this is a report generated with my tool: https://github.com/DTeam-Top/tsw-cli. See it as an experiment not a formal research, 😄。
Mindmap
Summary
This document outline...
How (not) to Expose Your Password in Plain Text When Using AWS Transfer Family SFTP
Recently I was approached by one of my customers who wanted a storage service in AWS and wanted to use their existing corporate Entra ID credentials for authentication. Looking at the possible options...
[Best of February - M3Di] From Forest to Code: Transformational Security Researcher Growth Notes
He is from Yunnan, China, and has four years of experience in security bug mining. Over the past two years, he has dedicated himself wholeheartedly to security bug research. He is a security researche...
How to pin GitHub Actions to a full commit length SHA across all repositories in your organization
Last weekend, the popular GitHub Action tj-actions/changed-files was compromised.
https://semgrep.dev/blog/2025/popular-github-action-tj-actionschanged-files-is-compromised/
https://www.stepsecurity.i...
Enhancing Endpoint Security with Microsoft Intune and Microsoft Copilot for Security
Introduction
In today’s data-driven world, organizations rely on artificial intelligence (AI) and machine learning (ML) to extract insights, automate processes, and drive innovation. Micros...
How to verify GitHub commits with SSH
First Things First: Why Should You Sign Your Commits?
By default, Git accepts whatever name and email you set when authoring a commit. When you push that commit to GitHub, GitHub associates i...
TROUBLESHOOTING DNS PROBLEMS IN AN ACTIVE DIRECTORY DOMAIN CONTROLLER
As a system and Network Administrator , Troubleshooting DNS problems in Active Directory is a crucial skill to have. it requires a systematic approach to identify and resolve the issue.PROBLEM STATEME...