ebad@research:~$ whoami

ebad khan
network security technician // detection engineering // homelab nebula
ls -la ./posts
-r--r--r--
2026-08-09
1 min
Anonymous FTP to alert: closing the loop from HTB box to Wazuh detection research
-rw-r--r--
2026-07-22
1 min
VPNs are dead. Switch to mTLS. blog
cat ./about.md | head -3

Notes from the lab, writeups from HTB, and the occasional argument for why your detection rule is wrong. Cross-posted to LinkedIn — full version always lives here first.