Security Reference

Security operations and cryptographic patterns across encryption, PKI, SIEM, scanning, and incident response.

Encryption & Keys

Topic Description

age

Modern file encryption — key generation, recipients, encryption/decryption

GPG

GnuPG key management, signing, and web of trust

SSH Keys

Key generation, agent forwarding, and certificate-based auth

Hashing

Cryptographic hashing algorithms and verification

Encoding

Base64, hex, URL encoding/decoding

Passwords

Password generation and strength testing

PKI & Certificates

Topic Description

Certificates

OpenSSL certificate operations

OpenSSL

Certificate creation, inspection, conversion, and TLS debugging

TLS

TLS handshake, cipher suites, and certificate chain validation

PKI

Certificate authority hierarchies and enrollment workflows

EAP-TLS

Certificate-based 802.1X authentication

Secrets Management

Topic Description

Vault

HashiCorp Vault — KV, PKI, SSH certificates, and policies

Firewalls

Topic Description

Firewall

Rule management across iptables, nftables, ufw, and firewalld

SIEM & Monitoring

Topic Description

SIEM

Log ingestion, correlation rules, and detection engineering

Wazuh

Host-based intrusion detection and custom rule management

QRadar API

REST API mechanics for Ariel, offenses, assets, and exports

QRadar AQL

AQL patterns for event inventory and migration scoring

Sentinel

Microsoft Sentinel workspace and analytics rules

KQL

Kusto Query Language for threat hunting and log analysis

ISE DataConnect

Query patterns for ISE operational and migration reporting

Scanning & Defense

Topic Description

nmap

Network scanning and service discovery (see Networking)

Nessus

Vulnerability scanning and remediation workflows

IDS/IPS

Snort and Suricata rule management and tuning

Incident Response

Topic Description

Incident Response

Triage, containment, eradication, and recovery

Forensics

Evidence acquisition, disk imaging, and memory analysis

Analysis

Topic Description

Wireshark

Packet analysis, display filters, and protocol dissection

SSH Security

SSH hardening and tunneling patterns