FortiGate ACME Beyond Let’s Encrypt: ZeroSSL, Sectigo, and Internal step-ca
Manny Fernandez1. Title and Executive Summary Objective: Configure a FortiGate to enroll and auto-renew its public-facing certificate from an ACME certificate...
Read More
The 47-Day Certificate: The Whole Industry Is Going Let’s Encrypt’s ACME Model
Manny FernandezTL;DR Every public CA is moving to the Let's Encrypt model: short-lived TLS certificates renewed automatically, usually over ACME. The...
Read More
Every Type of Mass Storage, Explained: HDD, SSD, Tape, Optical, and Beyond
Manny FernandezExecutive Summary Objective: Give practitioners one reference that covers every major class of mass storage in use today: how each...
Read More
Essential Cybersecurity Acronyms: The Practitioner’s Decoder Ring
Manny Fernandez27 acronyms you will hear in every SOC standup, vendor pitch, and audit meeting, explained in plain language with the...
Read More
auditd on Linux: Install, Configure, and Actually Use the Linux Audit Framework
Manny FernandezExecutive Summary Objective: Deploy the Linux Audit Framework (auditd) on Ubuntu Server 24.04 LTS and RHEL 9 family hosts, build...
Read More
Quick Tip: FortiConverter Route File Format for Importing Static Routes from an ASA firewall
Manny FernandezFor those that may not know, Fortinet has a product named FortiConverter that will get a config file from a...
Read More
Logcheck on Linux: How to Install It, Configure It, and Run It
Manny FernandezExecutive Summary Objective: Deploy logcheck on a Debian or Ubuntu server so that every hour it reads the new log...
Read More
Ettercap in 2026: ARP Poisoning, DNS Spoofing, and Content Filtering on the LAN
Manny FernandezEttercap in 2026: ARP Poisoning, DNS Spoofing, and Content Filtering on the LAN Executive Summary Objective. Stand up ettercap in...
Read More
Trivy on macOS: Install It, Verify It, Run It
Manny FernandezWhat Trivy Is and Why You Want It Trivy is Aqua Security's open source, all-in-one scanner: one binary that finds...
Read More
Red Team Tool Series: Six DNS Recon Utilities Every Practitioner Should Own
Manny FernandezExecutive Summary Objective: Give you a working reference for six classic DNS reconnaissance and auditing utilities. For each tool you...
Read More
Blue Team Tool Series: “arpwatch” on Ubuntu 24.04: Layer 2 Change Detection That Still Earns Its Keep
Manny FernandezExecutive Summary ARP has no authentication. Any host on a broadcast domain can claim any IP address, and every neighbor...
Read More
Blue Team Tool Series: Logwatch Deep Dive: Turning /var/log Noise Into a Daily Security Briefing
Manny Fernandez1. Executive Summary Every Linux box you own is writing a diary nobody reads. auth.log, syslog, secure, mail.log, the journal:...
Read More
Red Team Tool Series: “tcpflow” Read the Conversation, Not the Packets
Manny FernandezExecutive Summary tcpdump shows you packets. Most of the time, what you actually care about is what the two endpoints...
Read More
How HTTPS Works: From ClientHello to Encrypted GET
Manny FernandezA practitioner walk-through of DNS, TCP, TLS 1.3, certificates, and the record layer, with the commands to watch every step...
Read More
The Practical Guide to APT: From Cross-Distro Setup to CLI Mastery
Manny FernandezExecutive Summary Objective: Give you a working command of APT (Advanced Package Tool): which distributions ship it by default, how...
Read More
RADIUS Deep Dive: What Actually Happens After You Click Connect
Manny FernandezYou have configured it a dozen times. Server IP, shared secret, Test Connectivity, green check, move on. RADIUS is the...
Read More
FortiGate IKEv2 Remote Access with EAP: What Actually Happens on the Wire
Manny FernandezExecutive Summary Objective: Walk through every message a FortiGate exchanges when a remote user connects over a dial-up IKEv2 tunnel...
Read More
MacPorts vs. Homebrew: Choosing a macOS Package Manager in 2026
Manny FernandezTwo philosophies, one Terminal. What actually differs, what changed this year, and which one belongs on your Mac. Objective: Explain...
Read More
IOS Focus Mode: Enabling, Configuring or Disabling it.
Manny FernandezExecutive Summary Objective: Understand every path that activates a Focus on an iPhone, configure Focus so it only silences what...
Read More
FortiGate BFD: What It Is, When to Use It, and How to Configure It
Manny FernandezObjective: Understand Bidirectional Forwarding Detection on FortiOS, decide where it belongs in your design, and configure it for BGP, OSPF,...
Read More
