zb

When I wrote Understanding Wazuh rules last year, I deliberately skipped part of the rule syntax.

While working on Wazuh rules, I kept repeating the same task: testing regular expressions locally without returning to a manager for every change.

Consider a representative detection team building a rule for suspicious LSASS access.

The Slack ping arrives before the command finishes running.

A migration reveals the missing concept Consider a representative migration pattern.

Why PANhunt exists When I started working in a payment processor, Dionach PANhunt project was already in use on many servers.

Microsoft mentioned the deprecation of VBScript years ago.

I released eolchecker 0.1.1 today.

On 21 May, I presented to FS-ISAC members on why Exercise Locked Shields matters for financial institutions.

I have been working on two small Windows tools: DZMAC and dznetcut.

I previously wrote about two Technitium DNS Server apps I built: the Log Exporter App, which exports DNS query logs for SIEM use, and the MISP Connector App, which pulls domain indicators from MISP and uses them for resolver-side blocking.