#blueteam

Articles tagged with #blueteam

Nov 13, 2026
Nov 13, 20269 min read
Investigating an SSH brute force in my home lab: 357 failed logins, one stolen account
Structured on the NIST SP 800-61 incident response lifecycle. Own lab: the attack was run on purpose against a throwaway account, then investigated from the logs as if it were a real alert. Field
9 min read
Nov 13, 2026
Nov 13, 20266 min read2 views
3 Wazuh detections I wrote and tested in my home lab
Three detections from my home SOC lab, each written by hand for Wazuh, tested against a real attack, and checked for false positives. For every one I followed the same loop: trigger the attack → find
6 min read2 views

#blueteam - 0x8R41NR07__braindump