$ ls ./knowledge
Cybersecurity knowledge base
Practical guides from the front line of security operations, penetration testing and compliance. Written for IT teams, business owners and people starting a cybersecurity career in Pakistan and beyond.
-
[ soc ]
What Is a SOC? A Complete Guide to Security Operations Centers
What a Security Operations Center actually does all day, who works in one, and how to build a SOC that catches real attacks.
-
[ siem ]
SIEM Explained: How SIEM Works and How to Choose the Right One
How a SIEM turns millions of log events into a handful of alerts that matter, and how to pick and deploy one without drowning in noise.
-
[ offensive security ]
Penetration Testing in Pakistan: Types, Process and What to Expect
Test types, the step-by-step pentest process, what a good report looks like and how to choose a trustworthy provider in Pakistan.
-
[ compliance ]
ISO 27001 Implementation: A Step-by-Step Guide
A ten-step roadmap from management buy-in to certification, including what changed in ISO 27001:2022 and the mistakes that delay audits.
-
[ incident response ]
How to Build an Incident Response Plan: Phases, Roles and Playbooks
The six phases of incident response, who does what, which playbooks to write first and how to test your plan before a real attack does.
-
[ threats ]
Phishing Attacks: How to Spot Them and Protect Your Organisation
Email, SMS, voice and QR code phishing explained, with the red flags, technical controls and training that actually reduce clicks.
-
[ threats ]
Ransomware Protection: A Practical Defence Guide for Businesses
How modern ransomware gangs operate, the ten controls that stop most attacks, and a recovery plan that does not depend on paying.
-
[ cloud security ]
Microsoft 365 Security Best Practices: A 2026 Checklist
Identity, email, data, device and monitoring controls that harden a Microsoft 365 tenant, from a Microsoft-certified security administrator.
-
[ ai security ]
LLM Security: Prompt Injection and the OWASP Top 10 for LLM Applications
Why AI chatbots and agents create a new attack surface, the OWASP Top 10 risks for LLM apps, and guardrails that actually hold.
-
[ careers ]
How to Start a Cybersecurity Career in Pakistan: A 2026 Roadmap
The roles, skills, labs, certifications and job-hunting steps I recommend to students and career switchers in Pakistan.
-
[ compliance ]
NIST Cybersecurity Framework 2.0 Explained: The Six Functions and How to Use Them
What changed in CSF 2.0, what each of the six functions really asks of you, and how to turn the framework into a working roadmap.
-
[ soc ]
MITRE ATT&CK Explained: How Defenders Use It to Detect Real Attacks
The 14 enterprise tactics, how techniques and procedures fit together, and practical ways to use ATT&CK to improve detection coverage.
-
[ architecture ]
Zero Trust Security Explained: Principles, Pillars and a Practical Roadmap
Zero trust without the marketing: the principles behind it, the five pillars, and the order in which to actually implement it.
-
[ offensive security ]
Active Directory Security: Common Attacks and How to Harden AD
The AD attack paths I see most in penetration tests, and the hardening steps that shut them down.
-
[ soc ]
Threat Hunting: A Practical Guide to Finding Attackers Your Alerts Miss
How to run hypothesis-driven hunts, which behaviours to hunt first, and how every good hunt becomes a new detection.
-
[ operations ]
Vulnerability Management: How to Build a Programme That Actually Reduces Risk
Why patching by CVSS score alone fails, and how to prioritise with exploitability data, asset context and clear remediation SLAs.
-
[ cloud security ]
Azure Security: The Cloud Misconfigurations Attackers Look For First
Public storage, exposed RDP, over-privileged identities and secrets in code: the Azure mistakes I check first, and how to fix them.
-
[ operations ]
Antivirus vs EDR vs XDR vs MDR: What Is the Difference and What Do You Need?
Four acronyms vendors love to blur. What each actually does, and which combination fits a small, mid-sized or large organisation.
-
[ application security ]
OWASP Top 10 Explained: The Web Application Risks Every Developer Must Know
Every risk in the OWASP Top 10, what it looks like in a real penetration test, and the fixes developers can apply today.
-
[ careers ]
SOC Analyst Interview Questions and Answers: 30 Questions to Prepare For
The questions I actually ask when hiring SOC analysts, grouped by topic, with what a strong answer sounds like.