In this post, I’ll explain different strategies that can be use to secure WordPress. If you are reading this, you are probably interested in strategies to secure WordPress as much as possible. You can start by reading the following 2 posts where I hint at some strategies which I’ll…

This post is a follow up of the post SIEM 102 — Detect Windows bruteforce where I explained how to create a detection Use Case to detect a Windows bruteforce. In this post I will explain how we can enhance the original detection logic by having a lower False…

I have posted a few articles about SIEMs and I have all done them using Logz.io for my examples. I recently switched to Humio and transferred all the logs and automations I have. In this post I explain why I did this transfer. Here are the posts I did…

In this post I’ll explain the CIS controls and how they can be used to start securing an enterprise. When you’re in a medium or big environment and the maturity level of the InfoSec is around zer0, it’s hard to decide where to start in securing your environment. Do…

Log4j is a library used by many systems around the world. The Log4j vulnerability, named Log4Shell, is hard to detect because it can be used directly or indirectly in systems you’re not even aware you have. According to Jen Easterly, the U.S Cybersecurity and Infrastructure Security director, Log4Shell is…

I have been asked a few times over the years for a good reading list of cybersecurity books and references to get to know more on the different aspects of the Information Security field. I decided to document this list here so it can be used by a broader…

If you didn’t read it, I wrote a “part 1” which addresses easier challenges: https://www.tristandostaler.com/northsec-ctf-write-up-part-1/ This post will be the part 2 of my write ups. Hymn This challenge was interesting for me because of my bias towards challenges of the past. As soon as I saw a CAPTCHA, my whole…

It has been a few weeks since I wrote my last post! I was working on another post (which is almost done), but then NSec’s CTF was coming up so I had to prepare a bit! We did come up in 11'th place! 📣📣📣 Have a look at our Top…

You can join MEGA, the most secure cloud storage, with this referral link: https://mega.nz/aff=7Y94iYz_csg TL;DR; Why cloud storage When you have important data, just keeping one copy of this data is not enough. You can make sure to have enough backup (using something like the 3–2–1 rule) or you can use a cloud storage…