# root security.eu

> root-security.eu is a blog dedicated to cybersecurity and technology. It features articles, tutorials, and resources for enthusiasts and professionals alike.

Author: Denis-Florin Rendler — Romania / Europe. Canonical site: https://root-security.eu.

## Notebook

- [Building Audit Trails for Zoho Mail: Real-Time Admin Monitoring with Wazuh](https://root-security.eu/notebook/audit-trails-zoho-mail-admin-wazuh/): A guide to integrating Zoho Mail administrative audit logs with Wazuh SIEM using Logstash, creating custom decoders and detection rules, and mapping events to ISO 27001 compliance controls.
- [Integrating Keeper Security Event Logs with Wazuh SIEM](https://root-security.eu/notebook/integrating-keeper-logs-with-wazuh/): A guide to forwarding Keeper enterprise suite audit logs to Wazuh for centralized security monitoring, creating custom decoders to parse authentication, vault access, and privileged session events, and building detection rules for suspicious activity.
- [Managed privileged access: implementing a KeeperPAM POC](https://root-security.eu/notebook/managed-privileged-access-with-keeper-pam/): From deployment to first connection: A step-by-step proof of concept showing how KeeperPAM delivers agentless privileged access management with just-in-time identity creation and secure session recording.
- [Monitoring MikroTik RouterOS with Wazuh](https://root-security.eu/notebook/monitoring-mikrotik-with-wazuh/): A walk-through guide of the process of configuring MikroTik RouterOS to send its logs to a Wazuh server, then create custom decoders and rules to make sense of that data and get alerts that the security teams can act on.

## Feeds & machine-readable sources

- [Full text for LLMs](https://root-security.eu/llms-full.txt)
- [RSS feed](https://root-security.eu/rss.xml)
- [Sitemap](https://root-security.eu/sitemap-index.xml)