I’m excited to be here. I’ve been working in Cyber Security or similar for around 10 years now, but feel like there’s always more to learn or re-learn. I like to do network security and administer my local home cloud as a hobby. This year I’ve been trying to de-google my life and recover from my google fanboy era.
Outside of that I like playing a handful of RTS or open world games, hiking, or talking about the state of the world.
I’m really interested to learn about what threats everyone is seeing hitting their home clouds (For those who are hosting stuff at home) and share/compare logs from my own.
Thanks! Currently I’m running Zeek on a passive tap between my switch and firewall, full logs off my firewall, access logs from Traefik, and a janky vibe coded program that monitors network traffic on my linux boxes and matches up process ids/executables with the network traffic they create(This is helpful for the unknown protocols). All of that gets fed into elastic.
The logs are overwhelming but also helpful when I’m troubleshooting something.