Category Uncategorized

Part 4 – Feeding Real Data Author: Collin Series: Noise to Signal Part: 4 of 5 Date: April 2026 Parts 1 through 3 got Security Onion running, capturing home network traffic, and indexing it. The monitoring stack is working. The…

Author: Collin Category: Threat Analysis Tags: phishing, AI, CERT-UA, AGEWHEEZE, RAT, threat intelligence, blue team Everyone in security has heard the prediction: AI is going to supercharge phishing. It shows up in every vendor slide deck, every threat landscape report,…

Getting Traffic In Series: Noise to Signal Part: 3 of 5 Date: March 2026 Parts 1 and 2 covered the design decisions and the install. At this point Security Onion is running, all containers are green, and the web interface…

Part 2 – Installation and Initial Configuration Series: Noise to Signal Part: 2 of 5 Date: March 2026 Part 1 covered the architecture – why the hardware is split the way it is, how the capture interface works, and what…

Part 1 — Design and Architecture Series: Noise to Signal Part: 1 of 5 Date: March 2026 There’s a version of the homelab that’s just a fancy media server with some self-hosted apps bolted on. That’s fine. But if you…