Articles
⎿ 12 articles · I would post more but I can't exit neovim:wq!!!! q!!
- ⎿Sep 20, 2026·25 minRunning Your Own Personal HashiCorp Vault on Local Kubernetes: A Security Engineer's Guide
Learn to set up and configure HashiCorp Vault locally on Kubernetes for development, testing, and learning secure credential management practices.
vaultkubernetessecuritydevops - ⎿Jul 1, 2026·14 min🔓 Do You Want to Play a Game? Watching Agents Break Out of Their Sandbox
A build writeup of escape-the-box: a red-team harness pitting coding agents (Claude Opus 4.8, GLM 5.2) against a stacked userspace-guard...
ai-agentssandboxsecurityred-team - ⎿Jun 15, 2026·16 minThere's a Llama in my Firewall
Building an AI prompt-injection lab on Cloudflare Workers: how Workers, Durable Objects, Containers, and the Dynamic Worker Loader compose into...
cloudflareworkerscontainersai-security - ⎿Mar 10, 2026·25 min🦆🔍 Learn SQL by Exploring the Epstein Files
A progressive SQL tutorial using DuckDB-WASM to query the publicly released Epstein email archive from data.jmail.world. Covers SELECT, WHERE, GROUP...
sqlduckdbosintdata-analysis - ⎿Dec 5, 2025·15 min📓✍🏻My GIAC Study System: Obsidian FTW
A comprehensive guide to building a GIAC study system using modern tools - Obsidian for note-taking, a custom Python tool...
giacsansobsidianstudy-system - ⎿May 12, 2025·12 min🔍🌐 Open Sesame - Finding Exposed Services Across Your Cloud Estate
Commercial CSPM tools are expensive, but with DuckDB and some SQL wizardry, you can create your own solution for analyzing...
cloudsecurityduckdbsql - ⎿May 6, 2025·12 minSecuring Cloud Credentials 101...and 201...and maybe a little bit of 301.
Let's dive into cloud credentials from hardcoded access keys to OIDC!
cloudsecurityvaultaws-cli - ⎿May 5, 2025·12 min🏠🛡️ We Have CSPM at Home: Using DuckDB and SQL to Discover Your Lab's Cloud Security Posture
Commercial CSPM tools are expensive, but with DuckDB and some SQL wizardry, you can create your own solution for analyzing...
cloudsecurityduckdbsql - ⎿May 5, 2025·15 min🚰📊 Tailpipe - a DuckDB powered SIEM for your cloud!
Tailpipe is an open source SIEM for instant log insights, powered by DuckDB. Analyze millions of events in seconds, right...
codesqlduckdbcloud - ⎿Jan 15, 2025·8 min🦆💻 DuckDB for Security Engineers: SQL Magic for Your Security Tool Outputs
DuckDB offers powerful capabilities for analyzing data from any source. This guide demonstrates everyday use cases from local files to...
codesqlduckdbcloud - ⎿Mar 30, 2024·12 minSANS Cloud Security Graduate Certificate Review
Is the Cloud Security Graduate Certificate worth your time? Is this blog worth your time? Who knows! Email support for...
sanscertspersonal - ⎿Mar 30, 2023·10 minSANS Index Creation and Study Guide
A guide on how to create indexes for SANS courses and use them for studying.
giacindex-creationsanstooexpensivetoofail