root-security.eu
root-security.eu is a blog dedicated to cybersecurity and technology. It features articles, tutorials, and resources for enthusiasts and professionals alike.
Git Repo Forensics: My Seven Phases Investigation Process
My seven phase forensics process for investigating suspicious Git repositories: preserving evidence, analysing patch content and committer identity, confirming blast radius, and the platform controls that make the next investigation faster.
Building Audit Trails for Zoho Mail: Real-Time Admin Monitoring with Wazuh
A guide to integrating Zoho Mail administrative audit logs with Wazuh SIEM using Logstash, creating custom decoders and detection rules, and mapping events to ISO 27001 compliance controls.
Integrating Keeper Security Event Logs with Wazuh SIEM
A guide to forwarding Keeper enterprise suite audit logs to Wazuh for centralized security monitoring, creating custom decoders to parse authentication, vault access, and privileged session events, and building detection rules for suspicious activity.