Step-by-step guides for IT professionals and enthusiasts
Set up restic to produce deduplicated, client-side encrypted backups to Backblaze B2 or any S3 bucket, automate them with systemd, prune old snapshots, and prove restores actually work.
Install Semgrep, run community rulesets, write custom rules, and gate pull requests in GitHub Actions so insecure code never merges.
Stand up a private PKI with Smallstep step-ca, issue short-lived certificates over ACME, and automate renewals for internal services.
Install and configure ClamAV to automatically scan file shares, mail queues, and uploaded files on Linux — with scheduled scans, quarantine, and real-time...
Sign your container images with Cosign's keyless Sigstore workflow, verify signatures before deploy, and enforce the policy in Kubernetes so unsigned...
Plant free honeytokens across file shares, AWS, email, and Active Directory so an intruder trips an alert the moment they touch something they shouldn't.
Find every live host, open port, and service on your network before an attacker does. A practical walkthrough of Nmap scan types, service detection, NSE...
Capture, filter, and triage network traffic like an analyst. Learn Wireshark display filters, tshark for headless captures, and how to spot common attack...
Generate a complete inventory of every package, library, and dependency in your containers and codebases with Syft, then scan that inventory for known...