---
title: "#cybersec articles | Hashnode"
description: "Getting your CyberSecurity knowledge/skills up-to-date  is THE most important thing all developers need to do."
url: "https://hashnode.com/tag/cybersec"
---

Tag

# #cybersec

547 posts · 832 followers

[rathsara](https://hashnode.com/@rathsara) · [Oct 17](https://hashnode.com/posts/idslab-what-does-another-ids-stage-actually-add/6ad34699498dde50052a8406)

### [IDSLab: What Does Another IDS Stage Actually Add?](https://rr-cyber.hashnode.dev/idslab-what-does-another-ids-stage-actually-add?utm_source=hashnode&utm_medium=feed)

An open-source framework for experimenting with staged intrusion detection systems

9 min read · [rr-cyber.hashnode.dev](https://rr-cyber.hashnode.dev/idslab-what-does-another-ids-stage-actually-add?utm_source=hashnode&utm_medium=feed)

[rathsara](https://hashnode.com/@rathsara) · [Oct 15](https://hashnode.com/posts/the-practical-firewall-audit-checklist/6ad0fbee4ad0f92e41ec56b6)

### [The Firewall Is the Target Now: A Practical Audit Checklist](https://rr-cyber.hashnode.dev/the-practical-firewall-audit-checklist?utm_source=hashnode&utm_medium=feed)

Where I’d start a firewall audit; the device, the rules, the traffic and the process

18 min read · [rr-cyber.hashnode.dev](https://rr-cyber.hashnode.dev/the-practical-firewall-audit-checklist?utm_source=hashnode&utm_medium=feed)

[Shreyansh Builds](https://hashnode.com/@shreyanshbuilds) · [Oct 7](https://hashnode.com/posts/i-walked-away-from-cybersecurity-a-phishing-attempt-on-my-own-code-dragged-me-back-in/6ac639b24047a560542a51e7)

### [I Walked Away from Cybersecurity. A Phishing Attempt on My Own Code Dragged Me Back In.](https://thelastdeploy.hashnode.dev/i-walked-away-from-cybersecurity-a-phishing-attempt-on-my-own-code-dragged-me-back-in?utm_source=hashnode&utm_medium=feed)

How an automated phishing scam on my own dev.to article dragged me back into cybersec. Deconstructing the infrastructure, scripts, and code.

10 min read · [thelastdeploy.hashnode.dev](https://thelastdeploy.hashnode.dev/i-walked-away-from-cybersecurity-a-phishing-attempt-on-my-own-code-dragged-me-back-in?utm_source=hashnode&utm_medium=feed)

[1](https://hashnode.com/posts/i-walked-away-from-cybersecurity-a-phishing-attempt-on-my-own-code-dragged-me-back-in/6ac639b24047a560542a51e7)

[rathsara](https://hashnode.com/@rathsara) · [Sep 22](https://hashnode.com/posts/hiding-network-connections-encryption-onion-routing-and-identity-spoofing/6ab2af3aeaf886d499ed8f58)

### [Hiding Network Connections: Encryption, Onion Routing, and Identity Spoofing](https://rr-cyber.hashnode.dev/hiding-network-connections-encryption-onion-routing-and-identity-spoofing?utm_source=hashnode&utm_medium=feed)

The content is encrypted, the path is anonymised, the origin is spoofed: but the connection is still visible

15 min read · [rr-cyber.hashnode.dev](https://rr-cyber.hashnode.dev/hiding-network-connections-encryption-onion-routing-and-identity-spoofing?utm_source=hashnode&utm_medium=feed)

[rathsara](https://hashnode.com/@rathsara) · [Sep 21](https://hashnode.com/posts/network-data-hiding-covert-channels-and-traffic-manipulation/6ab1388b156512979e6ce8cc)

### [Network Data Hiding: Covert Channels and Traffic Manipulation](https://rr-cyber.hashnode.dev/network-data-hiding-covert-channels-and-traffic-manipulation?utm_source=hashnode&utm_medium=feed)

From IP headers to DNS queries: how covert channels work and how their traffic patterns give them away

17 min read · [rr-cyber.hashnode.dev](https://rr-cyber.hashnode.dev/network-data-hiding-covert-channels-and-traffic-manipulation?utm_source=hashnode&utm_medium=feed)

[rathsara](https://hashnode.com/@rathsara) · [Sep 18](https://hashnode.com/posts/windows-where-data-hides-and-how-it-s-found/6aacff122422f9edf7f68ba3)

### [Windows: Where Data Hides and How It's Found](https://rr-cyber.hashnode.dev/windows-where-data-hides-and-how-it-s-found?utm_source=hashnode&utm_medium=feed)

A file reports 25 bytes. A different command reveals 19MB attached to it. Where NTFS actually hides data, and the exact commands that find it.

15 min read · [rr-cyber.hashnode.dev](https://rr-cyber.hashnode.dev/windows-where-data-hides-and-how-it-s-found?utm_source=hashnode&utm_medium=feed)

[rathsara](https://hashnode.com/@rathsara) · [Sep 18](https://hashnode.com/posts/gnu-linux-where-data-hides-and-how-it-s-found/6aad21f08c2d1a534bbb2d82)

### [GNU/Linux: Where Data Hides and How It's Found](https://rr-cyber.hashnode.dev/gnu-linux-where-data-hides-and-how-it-s-found?utm_source=hashnode&utm_medium=feed)

A partition table entry reading "Hidden FAT16." An inode field nobody writes to. A nanosecond timestamp carrying encoded data. Where GNU/Linux hides evidence and how investigators find it.

13 min read · [rr-cyber.hashnode.dev](https://rr-cyber.hashnode.dev/gnu-linux-where-data-hides-and-how-it-s-found?utm_source=hashnode&utm_medium=feed)

[ridesh raju bijwe](https://hashnode.com/@rideshcyber) · [Sep 13](https://hashnode.com/posts/building-my-first-soc-home-lab-with-windows-kali-linux-using-oracle-virtualbox/6aa67b1f8fef56e08f12d0b8)

### [Building My First SOC Home Lab with Windows & Kali Linux Using Oracle VirtualBox](https://understanding-soc-as-a-learner.hashnode.dev/building-my-first-soc-home-lab-with-windows-kali-linux-using-oracle-virtualbox?utm_source=hashnode&utm_medium=feed)

Learn how to build a SOC home lab with Windows and Kali Linux using Oracle VirtualBox. Configure virtual networking and create a foundation for SIEM.

8 min read · [understanding-soc-as-a-learner.hashnode.dev](https://understanding-soc-as-a-learner.hashnode.dev/building-my-first-soc-home-lab-with-windows-kali-linux-using-oracle-virtualbox?utm_source=hashnode&utm_medium=feed)

[rathsara](https://hashnode.com/@rathsara) · [Sep 5](https://hashnode.com/posts/anontestlab/6a9bb75d679dabf971003c03)

### [AnonTestLab: Ten Years, Three Attempts, and One Idea That Wouldn't Let Go](https://rr-cyber.hashnode.dev/anontestlab?utm_source=hashnode&utm_medium=feed)

A practical account of how a rejected undergrad final-year idea turned into AnonTestLab after a decade, a real, circuit-based mix network emulator for testing anonymous communication designs

7 min read · [rr-cyber.hashnode.dev](https://rr-cyber.hashnode.dev/anontestlab?utm_source=hashnode&utm_medium=feed)

[rathsara](https://hashnode.com/@rathsara) · [Sep 3](https://hashnode.com/posts/windows-memory-forensics-finding-a-live-infection-with-volatility/6a99844241215cf6805a0d0a)

### [Windows Memory Forensics: Finding a Live Infection with Volatility](https://rr-cyber.hashnode.dev/windows-memory-forensics-finding-a-live-infection-with-volatility?utm_source=hashnode&utm_medium=feed)

Tracing a live Windows infection through volatile memory, from a suspicious process to injected code, persistence, and attacker intent.

11 min read · [rr-cyber.hashnode.dev](https://rr-cyber.hashnode.dev/windows-memory-forensics-finding-a-live-infection-with-volatility?utm_source=hashnode&utm_medium=feed)
