Blue Team

The blue team is a group focused on protecting assets. This includes monitoring the security controls, the intrusion detection systems, the logs to protect the assets and identify when a security breach occurs, and raising security awareness.

The below are links to writeups made on journeys in a digital landscape formed by nature’s own processes and humanoid activities and neglect throughout decades.

---

Security operations

• Environments, testlabs, and tools used
• Network traffic analysis (NTA)
• Endpoint detection and response (EDR)
• Security information and event management (SIEM)
• Digital forensics and incident response (DFIR)
• Malware analysis (RE)

---

@home and @org

• Threat landscape
• Hardening macOS
• Hardening Windows
• Hardening GNU/Linux
• Android hardening
• iOS hardening
• Protect your PII
• Hardening Linux server
• Network mitigations
• Hardening webserver
• Smarter mail servers
• Active defence strategies

---

Development

• Securing web applications
• DevSecOps

---