Focused, long-form technical field guides designed around critical cybersecurity disciplines. Each workbook provides deep architectural explanations, production command examples, threat analysis, and hands-on checkpoints—grounded in real system internals.
A structured architectural field guide to decomposing distributed systems, modeling trust boundaries, identifying threat vectors with STRIDE, and prioritizing remediation with DREAD risk formulas.
A rigorous field guide to designing stateful firewall policies, implementing ingress/egress filtering, preventing bypass attacks, and auditing iptables/nftables rulebases.
A rigorous security workbook examining Microsoft Active Directory identity architecture, Kerberos ticket exchange mechanics (TGT/TGS), Kerberoasting, AS-REP roasting, and detection engineering for enterprise domain compromise.
An exhaustive engineering guide exploring Linux namespaces, cgroups, boundary escape vulnerabilities, dangerous volume mappings, Docker socket exposures, and runtime confinement with Seccomp and AppArmor.
A practical manual for implementing kernel-level audit frameworks, configuring high-signal auditd rules, analyzing authentication event logs, and generating detection rules for SOC operations.
A technical guide to stateful vs stateless token architectures, RFC 7519 JSON Web Token vulnerabilities, cryptographic signature verification pitfalls, algorithm confusion, and zero-trust API protection.
A deep-dive technical handbook covering network protocol analysis, TCP three-way handshake telemetry, window scaling anomalies, state machine tracking, and SYN flood identification using tcpdump and Wireshark.
A comprehensive technical manual for analyzing Linux host security boundaries, identifying local privilege escalation vectors, auditing SUID binaries, exploiting sudo misconfigurations, and deploying defensive CIS controls.
