OPNsense on a Raspberry Pi: A Step-by-Step Guide
Manny FernandezExecutive Summary Objective: Stand up a working open source firewall on a Raspberry Pi 4, with a routed WAN and...
Read More
Legacy Protocols Must Die: FTP, Telnet, HTTP, and Their Secure Replacements
Manny FernandezExecutive Summary Objective: Identify every cleartext and unauthenticated legacy protocol still running in your environment, replace each one with its...
Read More
FortiGate and EntraID: Renewing an Expiring Entra ID SAML Signing Certificate Without Breaking SSO
Manny FernandezExecutive Summary Objective: Roll an expiring SAML signing certificate on a Microsoft Entra ID enterprise application to a new certificate,...
Read More
FortiGate PCP NAT: Letting Clients Request Their Own Port Mappings
Manny FernandezPort Control Protocol server, pools, pcp-outbound SNAT and pcp-inbound DNAT on FortiOS Executive Summary Static VIPs are fine when you...
Read More
APIPA Explained: The 169.254.0.0/16 Address Space, When It Is a Problem, and When It Is by Design
Manny FernandezExecutive Summary Objective: Explain exactly what the 169.254.0.0/16 address space is, how a host ends up with one of its...
Read More
What Is That Process Touching? Finding the Files a Running Process Uses on Linux, macOS, and Windows
Manny FernandezA practitioner guide to executables, libraries, mapped files, handles, and sockets, with the exact commands for all three operating systems....
Read More
Graylog Open 7.1 on Ubuntu 24.04: Install and Configure a Core Cluster
Manny FernandezExecutive Summary Objective Stand up a working Graylog Open 7.1 Core cluster (Graylog + MongoDB on one node, Data Node...
Read More
Deepfake Readiness: 16 Best Practices to Stop a Cloned Voice From Moving Money or Access
Manny FernandezThe Tuesday Afternoon Call It is a quiet Tuesday afternoon. The HR director's video flickers to life on Zoom, or...
Read More
TLS 1.0 vs 1.1 vs 1.2 vs 1.3: What Actually Changed and What to Disable Today
Manny FernandezA practitioner breakdown of every TLS version: handshakes, cipher suites, the attacks that killed the old ones, and the exact...
Read More
Windows Event Types for Forensic Investigations
Manny FernandezThe event IDs, log channels, and audit settings that actually solve cases In this post Executive Summary How Windows Event...
Read More
Anatomy of a SQL Injection Attack “SQLi”
Manny FernandezAnatomy of a SQL Injection Attack Executive Summary Objective: Walk a SQL injection (SQLi) attack from first probe to...
Read More
FortiGate ACME Beyond Let’s Encrypt: ZeroSSL, Sectigo, and Internal step-ca
Manny Fernandez1. Title and Executive Summary Objective: Configure a FortiGate to enroll and auto-renew its public-facing certificate from an ACME certificate...
Read More
The 47-Day Certificate: The Whole Industry Is Going Let’s Encrypt’s ACME Model
Manny FernandezTL;DR Every public CA is moving to the Let's Encrypt model: short-lived TLS certificates renewed automatically, usually over ACME. The...
Read More
Every Type of Mass Storage, Explained: HDD, SSD, Tape, Optical, and Beyond
Manny FernandezExecutive Summary Objective: Give practitioners one reference that covers every major class of mass storage in use today: how each...
Read More
Essential Cybersecurity Acronyms: The Practitioner’s Decoder Ring
Manny Fernandez27 acronyms you will hear in every SOC standup, vendor pitch, and audit meeting, explained in plain language with the...
Read More
auditd on Linux: Install, Configure, and Actually Use the Linux Audit Framework
Manny FernandezExecutive Summary Objective: Deploy the Linux Audit Framework (auditd) on Ubuntu Server 24.04 LTS and RHEL 9 family hosts, build...
Read More
Quick Tip: FortiConverter Route File Format for Importing Static Routes from an ASA firewall
Manny FernandezFor those that may not know, Fortinet has a product named FortiConverter that will get a config file from a...
Read More
Logcheck on Linux: How to Install It, Configure It, and Run It
Manny FernandezExecutive Summary Objective: Deploy logcheck on a Debian or Ubuntu server so that every hour it reads the new log...
Read More
Ettercap in 2026: ARP Poisoning, DNS Spoofing, and Content Filtering on the LAN
Manny FernandezEttercap in 2026: ARP Poisoning, DNS Spoofing, and Content Filtering on the LAN Executive Summary Objective. Stand up ettercap in...
Read More
Trivy on macOS: Install It, Verify It, Run It
Manny FernandezWhat Trivy Is and Why You Want It Trivy is Aqua Security's open source, all-in-one scanner: one binary that finds...
Read More
