Field guides
Operational security notes.
Concise references for defenders who need useful answers, not filler.
Network Utilities
How to Check If an IP Address Belongs to a CIDR Range
A practical guide for defenders who need to verify whether an IPv4 or IPv6 address belongs to a CIDR network.
→Threat Intelligence
MISP Warninglists: Why Defenders Should Use Them Before Blocking IOCs
How warninglists reduce false positives when operationalizing threat intelligence.
→Defensive Operations
How to Validate an IOC Before Blocking It on a Firewall
A defender-focused checklist for reducing false positives before automated firewall enforcement.
→Defensive Operations
How to Deduplicate IOCs Before Importing Them into a SIEM
A short workflow for cleaning indicator lists so ingestion stays fast and queries stay accurate.
→Threat Intelligence
Defanging Indicators: Why and How
The right way to make URLs and IPs safe to paste into reports, chats and tickets.
→Cybersecurity lab
Build a practical security lab
VPS, Wazuh and MISP