Tristan’s Cybersecurity Substack

Tristan’s Cybersecurity Substack

Home
Podcast
Notes
Chat
Merch Store
Donate to Support Me 🧡
SIEM / SOC / MDR
Archive
Leaderboard
About
SIEM 201 — Automating Threat Response: A Practical Guide
Introduction — The Case for Automated Response
 • Tristan Dostaler
16:58
The Elasticsearch license saga
Listen now (11 mins) | Explore the recent licensing change made by Elastic, the company behind Elasticsearch and Kibana, and its impact on the…
 • Tristan Dostaler
10:44
Your server is secure? Really?
What to do after you’ve secured your servers and computers
 • Tristan Dostaler
SIEM 101 — Introduction
In the following days, I’ll write a few blog posts explaining how to easily learn to use a Security Information and Event Management, or SIEM.
 • Tristan Dostaler
Never receive an alert from Windows Defender? You should!
A few years ago, I was on the defense team when a pentest was ongoing on one of our website.
 • Tristan Dostaler
SIEM 101 — Initial setup
In this post, I’ll explain how to initially setup a SIEM so you can receive your first logs.
 • Tristan Dostaler
SIEM 202 — Detecting remote PsExec
In this post I’ll explain how to detect an attacker that uses PsExec to connect to your computer when you don’t have visibility over the attacker’s…
 • Tristan Dostaler
Tristan’s Cybersecurity Substack
Tristan’s Cybersecurity Substack
Hello and welcome to my blog where I talk about my interests and try to provide useful information on multiple subjects in Information Technology, mainly on coding and InfoSec. https://bsky.app/profile/tristandostaler.bsky.social

Tristan’s Cybersecurity Substack

AboutArchiveSitemap
© 2026 Tristan Dostaler · Privacy ∙ Terms ∙ Collection notice
Start your SubstackGet the app
Substack is the home for great culture