Security Engineer who designs, builds, and automates defenses end to end — from detection and incident response to application, cloud, and infrastructure security.https://ytalharabaci.dev/en-UShttps://ytalharabaci.dev/en/blog/owasp/https://ytalharabaci.dev/en/blog/owasp/Historical development, architectural differences, and industry alignment of OWASP Top 10 projects covering Web, Mobile, API, K8s, CI/CD, and LLM/Agentic systems.Sun, 21 Jun 2026 00:00:00 GMTApplication SecurityOWASPDevSecOpsAI Securityhttps://ytalharabaci.dev/en/blog/agentic-ai-protocols-security-vulnerabilities/https://ytalharabaci.dev/en/blog/agentic-ai-protocols-security-vulnerabilities/As autonomous AI agents move into production, protocols like MCP, A2A, and AP2 form the new digital backbone. But what happens when we give models execution privileges? Let's break down the attack surfaces layer by layer.Mon, 15 Jun 2026 00:00:00 GMTAI SecurityAgentic AIMCPA2APrompt InjectionLLM Securityhttps://ytalharabaci.dev/en/blog/golang-for-hackers/https://ytalharabaci.dev/en/blog/golang-for-hackers/The Go (Golang) programming language for cybersecurity researchers, building fast network scanners, exploit development, and offensive tool design.Mon, 08 Jun 2026 00:00:00 GMTGoGolangOffensive SecurityPort ScannerConcurrencySecurity Toolinghttps://ytalharabaci.dev/en/blog/devsecops/https://ytalharabaci.dev/en/blog/devsecops/Balancing Shift-Left and Shift-Right paradigms across the SDLC: Enterprise CI/CD pipeline security, GitOps isolation, and eBPF-powered runtime observability.Sat, 23 May 2026 00:00:00 GMTDevSecOpsCI/CDShift-LeftKubernetesGitOpsSupply Chain SecurityeBPFOWASPServerlesshttps://ytalharabaci.dev/en/blog/escaping-office-ecosystem/https://ytalharabaci.dev/en/blog/escaping-office-ecosystem/Reclaiming data sovereignty in modern computing paradigms: sovereign technologies like LaTeX, DuckDB, Slidev, Nextcloud Hub, OnlyOffice, Mailcow, and Enterprise Linux.Mon, 18 May 2026 00:00:00 GMTSovereign StackOpen SourceNextcloudOnlyOfficeLaTeXDuckDBPrivacySelf-HostedLinuxhttps://ytalharabaci.dev/en/blog/modern-web-architectures-and-ssg-ecosystem/https://ytalharabaci.dev/en/blog/modern-web-architectures-and-ssg-ecosystem/A comprehensive architectural guide exploring modern web rendering strategies (CSR, SSR, SSG, ISR), tech stacks (MERN, PERN, .NET), and DevSecOps supply chain security.Mon, 11 May 2026 00:00:00 GMTArchitectureDevSecOpsSSGJamstackAstroHugoNext.jsMERNPERN.NETCloudflarehttps://ytalharabaci.dev/en/blog/sentinelone-singularity-platform/https://ytalharabaci.dev/en/blog/sentinelone-singularity-platform/A technical evaluation of SentinelOne Singularity Platform covering autonomous agent architecture, Storyline™ correlation model, VSS-based rollback mechanisms, and Purple AI telemetry from a SOC engineering perspective.Tue, 18 Nov 2025 00:00:00 GMTSentinelOneEDRXDREndpoint SecurityPurple AIhttps://ytalharabaci.dev/en/writeups/threat-hunting-with-sysmon-writeup-letsdefend/https://ytalharabaci.dev/en/writeups/threat-hunting-with-sysmon-writeup-letsdefend/Gathering endpoint telemetry with Sysmon (System Monitor), analyzing process execution (Event ID 1), detecting evasion anomalies, and the LetsDefend Threat Hunting walkthrough.Sat, 01 Nov 2025 00:00:00 GMTLetsDefendThreat HuntingWrite-upBlue TeamSIEMSysmonhttps://ytalharabaci.dev/en/writeups/threat-hunting-with-deception-writeup-letsdefend/https://ytalharabaci.dev/en/writeups/threat-hunting-with-deception-writeup-letsdefend/In the world of cybersecurity, threat hunting requires developing proactive approaches to detect attackers and stop their activities. While traditional security measures offer passive methods to stop attackers, deception-based threat hunting takes th...Fri, 31 Oct 2025 00:00:00 GMTLetsDefendThreat HuntingWrite-upBlue TeamSIEMDeceptionHoneypothttps://ytalharabaci.dev/en/writeups/threat-hunting-with-email-security-writeup-letsdefend/https://ytalharabaci.dev/en/writeups/threat-hunting-with-email-security-writeup-letsdefend/A hands-on LetsDefend threat hunting writeup analyzing email-borne attack vectors, phishing infrastructure, BEC indicators, and mailbox telemetry triage.Thu, 30 Oct 2025 00:00:00 GMTLetsDefendThreat HuntingWrite-upBlue TeamSIEMEmail SecurityPhishinghttps://ytalharabaci.dev/en/writeups/threat-hunting-with-edr-writeup-letsdefend/https://ytalharabaci.dev/en/writeups/threat-hunting-with-edr-writeup-letsdefend/Threat hunting is a fundamental practice in modern cybersecurity strategies. It involves actively searching for potential security incidents and indicators of compromise (IOCs) that can evade traditional security measures. In this process, endpoint d...Wed, 29 Oct 2025 00:00:00 GMTLetsDefendThreat HuntingWrite-upBlue TeamSIEMEDRhttps://ytalharabaci.dev/en/writeups/threat-hunting-with-dns-writeup-letsdefend/https://ytalharabaci.dev/en/writeups/threat-hunting-with-dns-writeup-letsdefend/Domain Name System (DNS) is one of the fundamental building blocks of the internet. DNS translates domain names (e.g., www.example.com) into IP addresses when users want to access a specific website on the internet. This translation allows users to e...Thu, 23 Oct 2025 00:00:00 GMTLetsDefendThreat HuntingWrite-upBlue TeamSIEMDNShttps://ytalharabaci.dev/en/blog/information-gathering-techniques/https://ytalharabaci.dev/en/blog/information-gathering-techniques/A comprehensive cyber threat intelligence guide combining classic OSINT and network reconnaissance with cloud exposure, supply chain analysis, AI-powered CTI pipelines, and the ProjectDiscovery ecosystem.Sun, 19 Oct 2025 00:00:00 GMTOSINTReconnaissanceInformation GatheringPenetration TestingGoogle DorksNmaphttps://ytalharabaci.dev/en/writeups/threat-hunting-with-ips-ids-writeup-letsdefend/https://ytalharabaci.dev/en/writeups/threat-hunting-with-ips-ids-writeup-letsdefend/Threat hunting is a proactive cybersecurity strategy. Rather than focusing solely on known threats, security teams hunt for advanced and stealthy attacks that have yet to be detected. Intrusion prevention system (IPS) and intrusion detection system (...Mon, 13 Oct 2025 00:00:00 GMTLetsDefendThreat HuntingWrite-upBlue TeamSIEMIDSIPShttps://ytalharabaci.dev/en/writeups/threat-hunting-with-waf-writeup-letsdefend/https://ytalharabaci.dev/en/writeups/threat-hunting-with-waf-writeup-letsdefend/A Web Application Firewall (WAF) is a security layer used to protect web applications. Unlike traditional firewalls, WAFs specifically target threats aimed at web applications. These threats include SQL injections, XSS (Cross-Site Scripting) attacks,...Fri, 03 Oct 2025 00:00:00 GMTLetsDefendThreat HuntingWrite-upBlue TeamSIEMWAFhttps://ytalharabaci.dev/en/writeups/threat-hunting-with-cti-writeup-letsdefend/https://ytalharabaci.dev/en/writeups/threat-hunting-with-cti-writeup-letsdefend/A hands-on LetsDefend threat hunting writeup analyzing Cyber Threat Intelligence (CTI) feeds, IoC correlation, threat actor attribution, and proactive hunting hypotheses.Mon, 29 Sep 2025 00:00:00 GMTLetsDefendThreat HuntingWrite-upBlue TeamSIEMThreat IntelligenceCTIhttps://ytalharabaci.dev/en/writeups/threat-hunting-with-siem-writeup-letsdefend/https://ytalharabaci.dev/en/writeups/threat-hunting-with-siem-writeup-letsdefend/A hands-on LetsDefend threat hunting writeup exploring SIEM correlation engines, log pipeline triage, hypothesis-driven hunting, and event investigation.Sun, 21 Sep 2025 00:00:00 GMTLetsDefendThreat HuntingWrite-upBlue TeamSIEMhttps://ytalharabaci.dev/en/writeups/threat-hunting-with-firewalls-writeup-letsdefend/https://ytalharabaci.dev/en/writeups/threat-hunting-with-firewalls-writeup-letsdefend/Firewall logs are a critical source of data for monitoring network traffic and analyzing security incidents. During threat hunting, firewall logs are used to detect potential threats, identify anomalies, and respond to security incidents quickly and ...Sat, 20 Sep 2025 00:00:00 GMTLetsDefendThreat HuntingWrite-upBlue TeamSIEMFirewallhttps://ytalharabaci.dev/en/blog/global-cyber-threat-actors-apt/https://ytalharabaci.dev/en/blog/global-cyber-threat-actors-apt/Global Advanced Persistent Threat (APT) groups, their strategic motivations, TTPs, and MITRE ATT&CK mapping: comprehensive analysis of state-sponsored actors from Russia, China, Iran, and North Korea.Sat, 26 Jul 2025 00:00:00 GMTAPTThreat IntelligenceThreat ActorsCyber EspionageMITRE ATT&CKhttps://ytalharabaci.dev/en/blog/identity-and-access-management/https://ytalharabaci.dev/en/blog/identity-and-access-management/A comprehensive guide to Identity and Access Management (IAM) at the core of Zero Trust: exploring SSO, MFA, PAM, RBAC/ABAC models, and modern federation protocols.Sat, 26 Jul 2025 00:00:00 GMTIAMIdentity and Access ManagementActive DirectoryZero TrustCybersecurityhttps://ytalharabaci.dev/en/blog/intrusion-detection/https://ytalharabaci.dev/en/blog/intrusion-detection/A comprehensive guide on detecting web application attacks (SQLi, XSS, LFI, RFI, Path Traversal) by analyzing Apache access logs manually and automatically using ModSecurity and Fail2Ban.Sun, 01 Jun 2025 00:00:00 GMTIntrusion DetectionApacheLog AnalysisWeb AttacksDirectory TraversalThreat Huntinghttps://ytalharabaci.dev/en/blog/information-security/https://ytalharabaci.dev/en/blog/information-security/A comprehensive guide to international information security standards (ISO/IEC 27001, NIST, CIS), regulatory frameworks, and cybersecurity certification bodies.Sat, 05 Apr 2025 00:00:00 GMTStandardsISO 27001NISTCISInformation Securityhttps://ytalharabaci.dev/en/blog/windows-system-management/https://ytalharabaci.dev/en/blog/windows-system-management/A comprehensive guide to Windows system administration, essential CMD and PowerShell commands, MMC management consoles, Active Directory administrative tools, and WMI.Sun, 09 Mar 2025 00:00:00 GMTWindows ServerActive DirectorySystem AdministrationPowerShellCMDhttps://ytalharabaci.dev/en/blog/popular-endpoint-security-solutions/https://ytalharabaci.dev/en/blog/popular-endpoint-security-solutions/Architectural, telemetry, and operational analysis of leading enterprise EDR/XDR solutions including CrowdStrike, SentinelOne, Microsoft Defender, and Trend Micro.Sat, 01 Mar 2025 00:00:00 GMTEndpoint SecurityEDRXDREPPAntivirushttps://ytalharabaci.dev/en/blog/lab-environments-for-cyber-security/https://ytalharabaci.dev/en/blog/lab-environments-for-cyber-security/A comprehensive guide to penetration testing distros, digital forensics (DFIR), malware analysis, privacy platforms, and simulated Active Directory labs (GOAD, DetectionLab, Attack Range).Mon, 02 Dec 2024 00:00:00 GMTHome LabVirtualizationKali LinuxParrot OSBackBoxPenetration Testinghttps://ytalharabaci.dev/en/blog/windows-persistence/https://ytalharabaci.dev/en/blog/windows-persistence/A comprehensive security guide examining how an attacker maintains persistence after Initial Access and spreads laterally through the network. Covers WMI Event Subscriptions, COM Hijacking, IFEO, Kerberos attacks, SOC detection engineering, and hardening steps.Mon, 18 Nov 2024 00:00:00 GMTWindowsPersistenceRegistryWMIMITRE ATT&CKThreat Huntinghttps://ytalharabaci.dev/en/blog/elastic-stack/https://ytalharabaci.dev/en/blog/elastic-stack/A comprehensive guide to installing, configuring, and managing Elasticsearch, Logstash, Kibana, and Beats (Elastic Stack) on Debian/Ubuntu, including Elastic Agent/Fleet architecture, ES|QL query language, Vector Database integration, and MITRE ATT&CK SIEM rules.Tue, 05 Nov 2024 00:00:00 GMTElastic StackELKSIEMElasticsearchLogstashKibanaLog Managementhttps://ytalharabaci.dev/en/writeups/pygoat-owasp-top-10-2021-write-up/https://ytalharabaci.dev/en/writeups/pygoat-owasp-top-10-2021-write-up/A comprehensive walk-through of the OWASP Top 10 (2021) web vulnerabilities in the PyGoat laboratory, covering exploitation flows and secure code remediation.Sun, 27 Aug 2023 00:00:00 GMTOWASP Top 10PyGoatWeb Application SecurityWrite-upDjangohttps://ytalharabaci.dev/en/blog/operating-system-concept/https://ytalharabaci.dev/en/blog/operating-system-concept/An in-depth guide to operating system structures, processes, CPU scheduling algorithms, memory management (segmentation, paging, virtual memory), and security fundamentals, inspired by the classic 'Dinosaur Book' (Operating System Concepts).Fri, 09 Jun 2023 00:00:00 GMTOperating SystemsProcess SchedulingMemory ManagementDeadlockKernelhttps://ytalharabaci.dev/en/blog/cyberattacks-in-the-osi-model/https://ytalharabaci.dev/en/blog/cyberattacks-in-the-osi-model/From physical sniffing and ARP poisoning to SYN floods, BGP hijacking, and Layer 7 exploits: an engineering breakdown of attacks and defenses across all seven OSI layers.Wed, 17 May 2023 00:00:00 GMTOSI ModelNetwork SecurityCyber AttacksMITMSpoofingXSShttps://ytalharabaci.dev/en/blog/cryptology-fundamentals/https://ytalharabaci.dev/en/blog/cryptology-fundamentals/From ancient scytale cylinders to elliptic curves, Diffie-Hellman handshakes, blockchain consensus, and practical Java implementations: your definitive guide to cryptology.Tue, 28 Mar 2023 00:00:00 GMTCryptologyCryptographyCryptographic ProtocolsCryptanalysisBlockchainCybersecurityhttps://ytalharabaci.dev/en/blog/malware-analysis-basics/https://ytalharabaci.dev/en/blog/malware-analysis-basics/A complete guide to malware analysis fundamentals: malware taxonomy, building an isolated sandbox lab, static and dynamic analysis, memory forensics with Volatility, and reverse engineering tools.Thu, 16 Mar 2023 00:00:00 GMTMalware AnalysisSandboxStatic AnalysisDynamic AnalysisReverse Engineeringhttps://ytalharabaci.dev/en/blog/offensive-security-kali-linux/https://ytalharabaci.dev/en/blog/offensive-security-kali-linux/An architectural overview of Kali Linux, deployment strategies, the penetration testing lifecycle, and practical offensive security toolchains.Sun, 15 Jan 2023 00:00:00 GMTOffensive SecurityKali LinuxPenetration TestingMetasploitNmaphttps://ytalharabaci.dev/en/blog/x86-c-programming-language/https://ytalharabaci.dev/en/blog/x86-c-programming-language/A comprehensive guide to system programming with C and x86 Assembly. Explore processor architecture, low-level memory management, and hardware integration through theory and practical laboratory exercises.Tue, 13 Dec 2022 00:00:00 GMTCx86AssemblyPointersLow-Level Programminghttps://ytalharabaci.dev/en/blog/python-for-hackers/https://ytalharabaci.dev/en/blog/python-for-hackers/A comprehensive guide on Python programming for security professionals, covering HTTP requests scripting, web automation with Selenium, socket programming for port scanning, and SSH remote management using Paramiko.Fri, 26 Aug 2022 00:00:00 GMTPythonOffensive SecurityScapySocket ProgrammingWeb SecurityDVWAhttps://ytalharabaci.dev/en/blog/birth-of-computers-and-first-operating-systems/https://ytalharabaci.dev/en/blog/birth-of-computers-and-first-operating-systems/From ENIAC's tangle of cables to Xerox PARC, Unix wars, Linux, and modern cloud native ecosystems: the remarkable evolution of operating systems.Tue, 01 Jun 2021 00:00:00 GMTOperating SystemsComputer HistoryUnixLinuxWindows