Ruby for DevOps: Triage Windows Event Logs with WMI
the shed // ruby x devops Someone brute-forced Administrator overnight and a mystery service appeared at 10am. It’s all in...
Ruby for DevOps: Auditing Every Cron Job on the Box
the shed // ruby x devops Every box has cron jobs nobody remembers writing. Some are broken, some never fire,...
Ruby for DevOps: Finding the SMB Shares Nobody Locked Down
the shed // smb share audit Windows keeps two access control lists on every share and hides them on different...
Ruby for DevOps: Kernel Hardening Audits That Survive a Reboot
the shed // kernel hardening audit You hardened the kernel once. Did it stay hardened? A single-file Ruby auditor that...
Ruby for DevOps: Auditing Every Listening Port Against a Baseline
the shed // listening port audit Every host tells you what it is listening on. None of them tell you...
Beyond SIEM Agents: Crafting Custom Threat Detectors with OS-Native APIs (Windows ETW & Linux Auditd)
Dive deep into the raw power of operating system security events. Learn to build custom threat detection and response tools...
Precise Process Isolation: Crafting Custom Sandbox Policies with Linux Seccomp and Windows AppLocker
Move beyond basic containerization to isolate critical services and untrusted scripts with surgical precision. Learn to leverage native OS features...
The DevOps Identity Crisis: Are We Engineers, Operators, or Something New Entirely?
The definition of a “DevOps Engineer” seems to shift monthly. Are traditional roles disappearing, or are we just witnessing a...
The ‘Developer vs. Security’ Standoff: Bridging the Divide in Modern DevOps Teams
Developers crave speed and innovation, while security teams demand rigor and compliance. This common organizational friction often slows down progress...