I have posted a few articles about SIEMs and I have all done them using Logz.io for my examples. I recently switched to Humio and transferred all the logs and automations I have. In this post I explain why I did this transfer. Here are the posts I did using…

In this post I’ll explain the CIS controls and how they can be used to start securing an enterprise. When you’re in a medium or big environment and the maturity level of the InfoSec is around zer0, it’s hard to decide where to start in securing your environment. Do…

Log4j is a library used by many systems around the world. The Log4j vulnerability, named Log4Shell, is hard to detect because it can be used directly or indirectly in systems you’re not even aware you have. According to Jen Easterly, the U.S Cybersecurity and Infrastructure Security director, Log4Shell is…

I have been asked a few times over the years for a good reading list of cybersecurity books and references to get to know more on the different aspects of the Information Security field. I decided to document this list here so it can be used by a broader public…

If you didn’t read it, I wrote a “part 1” which addresses easier challenges: https://www.tristandostaler.com/northsec-ctf-write-up-part-1/ This post will be the part 2 of my write ups. Hymn This challenge was interesting for me because of my bias towards challenges of the past. As soon as I saw a CAPTCHA, my whole…

It has been a few weeks since I wrote my last post! I was working on another post (which is almost done), but then NSec’s CTF was coming up so I had to prepare a bit! We did come up in 11'th place! 📣📣📣 Have a look at our Top…

You can join MEGA, the most secure cloud storage, with this referral link: https://mega.nz/aff=7Y94iYz_csg TL;DR; Why cloud storage When you have important data, just keeping one copy of this data is not enough. You can make sure to have enough backup (using something like the 3–2–1 rule) or you can use a cloud storage…

Where to start in Cybersecurity — Context — Note: I used “Cybersecurity paths” and “where to start in cybersecurity” just so I get good SEO results. To know why, you can read my post Information Security Synonyms. If you Google “Cybersecurity paths”, “Cybersecurity career” and other similar terms, you’ll find an array of results with all kind of…

As you may know from my posts, I like Elasticsearch. However, Elastic, the Elasticsearch company, recently announced it’s decision to change the license of it’s open-source products. Since then, the community largely reacted to this. Let me explain. Benefits of Elasticsearch Customers and the open-source community enjoyed a variety of services offered by…