Siem

• Apr 19, 2026 auditd: Linux's Syscall Logger

  A practical guide to Linux's audit daemon — how auditd logs security-relevant events at the syscall level, how to write rules that capture what compliance and threat detection need, and how to turn its verbose output into something usable.

• Apr 19, 2026 Wazuh HIDS: Self-Hosted Alternative to CrowdStrike and Falcon

  Wazuh as a serious self-hosted alternative to commercial EDR — host-based intrusion detection, file integrity monitoring, log analysis, and SIEM features — and how it stacks up against CrowdStrike and Falcon for fleets that can't pay per endpoint.