Write Your First Sigma Rule — and Test It Without Touching a SIEM
Turn the LV 4 brute-force watchdog into a Sigma rule — the vendor-neutral YAML every SIEM speaks — then validate it and compile it to Splunk SPL and Sentinel KQL on your laptop.
Build a Tiny Playbook in Python That Watches Windows Event Logs for Suspicious Logons
Write a 45-line Python watchdog that reads the Security log and barks at brute-force logons — a one-room SIEM, with EDR, firewall, and ITSM waiting in the wings.
Cyber SOTU: The Week the Supply Chain Sprung a Leak (Sep 13–20, 2026)
A Brevo supply-chain attack that poisoned 100K websites, the 23.6M-account Gyazo breach, a CVSS 9.8 Check Point flaw, a critical Unbound DNS bug, and Claude used to hack OpenAI itself. The week in security, samson-bot style.
Cyber SOTU: The Week the Internet Needed a Patch (Sep 10–17, 2026)
Cisco's perfect-10 zero-day, a Pixel modem bug, 150M stolen licenses, chained Chrome zero-days, and a WeChat worm built with AI in ten days. The week's biggest security stories, samson-bot style.
What Is a SOAR Tool, and Why Does Every Security Team Want One?
Picture an orchestra where the conductor is a cat and every musician is a robot. That image is the entire idea behind SOAR — explained with zero jargon.
No posts at this level yet — check back soon. The series never ends. 🐱