Soc on ittechnetworkk

Wireshark Filters

Mon, 16 Feb 2026 11:10:21 +0100

ICMP Request and Reply

Wazuh ClamAV Monitoring

Tue, 20 Jan 2026 10:58:28 +0100

This guide will walk you through setting up ClamAV antivirus integrating it with Wazuh for centralized security monitoring. This setup enables automatic malware detection, detailed logging through the Wazuh security platform.

Velociraptor Installation

Mon, 05 Jan 2026 10:46:36 +0100

Velociraptor is a powerful digital forensics and incident response (DFIR) platform that allows security teams to collect, monitor, and hunt across endpoints. This guide will walk you through installing both the Velociraptor server and client components.

A Honeypot Research

Sun, 16 Nov 2025 21:30:48 +0100

Hi everyone! In this article, I would like to share my latest research about a script I’ve recently observed on my honeypot project.

Beelzebub Dashboard

Tue, 11 Nov 2025 17:22:34 +0100

Hi everyone, in this article I would like to introduce you to my new project about visualizing Beelzebub logs, which is an AI-supported open-source honeypot solution that I modified slightly to achieve higher efficiency.

Wazuh Fail2ban Integration

Fri, 07 Nov 2025 17:17:44 +0100

Hi everyone! In this article I’ll walk you through installing and configuring Fail2Ban and then show you how to integrate it with Wazuh.

Wazuh Suricata Integration

Fri, 07 Nov 2025 17:06:01 +0100

Hi everyone! In this article I will walk you through installing Suricata on Ubuntu 24.04 and integrating its logs with Wazuh for centralized monitoring.

A Honeypot Story

Wed, 29 Oct 2025 10:36:54 +0100

Hi everyone. In this article, I’ll walk you through my research on an AI-powered honeypot project that I deployed in the cloud to observe various attacker Tactic and Technics.

Splunk Installation

Thu, 02 Oct 2025 23:09:17 +0200

Hi everyone, in this article I will guide you how to install Splunk Enterprise on Linux server and Universal Forwarder on Ubuntu Client.

Understanding YARA Rules

Sun, 31 Aug 2025 04:14:34 +0200

Hi everyone! In this article, I’d like to introduce you to YARA rules, which are powerful detection rules widely used in cybersecurity to identify malware and other suspicious patterns.

Windows Logon Types

Sun, 31 Aug 2025 04:04:25 +0200

Hi everyone,

Security Operation Center Setup

Sun, 17 Aug 2025 15:38:38 +0200

Hi everyone! In this article, I will take you through my Security Operation Center environment on Hetzner, which is a German company that provides web hosting services and data centers.

Fortigate Wazuh Integration

Sat, 19 Jul 2025 15:26:52 +0200

Hi everyone, in this article I will guide you through how to integrate Fortigate firewall with the Wazuh SIEM tool for centralized logging and monitoring.