While a traditional SOC focuses on internal monitoring (logs, SIEM, network flows, etc.), SATAYO works on the outside, adopting an attacker-centric perspective. By utilizing advanced OSINT (Open ...

When a cyber incident occurs, one of the first challenges is understanding what happened, which systems were involved, and what traces were left behind. In this context, Velociraptor can help: It’s an ...

The first half of 2026 has witnessed the transition of artificial intelligence from an experimental playground into a cyber warfare domain. In fact, threat actors have shifted from basic prompting ...

In organizations using Confluence Cloud as a knowledge‑base, documentation hub or collaboration platform, you often see pages or spaces created with restrictions (i.e., visible only to certain ...

Asset management/CMDB tools play (or should play!) a central role in IT operations and management, gathering data from hardware assets on contracts, software licenses, network configurations, tickets ...

Upgrading an existing NetEye cluster to 4.49 introduces a networking question that’s easy to underestimate. The existing environment may already have everything we normally associate with a NetEye ...

This article expands on the topic introduced in my earlier blog post Secure Access to Applications with Azure, which focused on securing access to an on-premises web application using Microsoft Entra ...

More tools don’t mean more intelligence. Especially when the model runs on your own hardware. Let’s be honest: Ever since the Model Context Protocol became the de facto standard for connecting an LLM ...

As you should already know, with NetEye 4.45 we officially began the transition from Icinga IDO to IcingaDB (see NetEye 4.45 Release Notes | www.neteye-blog.com). This means that IDO has been ...

When you create custom fields with the Fields plugin for GLPI, the container defines which itemtypes show the new tab. If you later need to add more itemtypes (for example Certificate or Domain), the ...

Power BI Report Server is widely used in company environments, where typically several Windows servers with different roles are deployed in an OnPremise Active Directory domain. In this blog, I’ll ...

The first half of 2026 marked a structural shift in how cyber criminals and state-sponsored groups achieve initial access. Rather than targeting corporate perimeters directly, adversaries have ...