https://cyramos.github.io/Explore cutting-edge cybersecurity insights, personal tech strategies, and effective digital note-taking techniques. A comprehensive resource for professionals and tech enthusiasts seeking practical digital workflow optimization and security knowledge. 2026-05-15T03:16:35+00:00 Tomer (Ramos) Zamir https://cyramos.github.io/ Jekyll © 2026 Tomer (Ramos) Zamir /assets/img/favicons/favicon.ico /assets/img/favicons/favicon-96x96.png 2026-04-09T00:00:00+00:00 2026-05-15T03:16:19+00:00 https://cyramos.github.io/posts/I-Built-a-Home-SIEM-Here's-What-Wazuh-Taught-Me/ Tomer (Ramos) Zamir

How I deployed Wazuh 4.14.4 on a home VM, what broke along the way, and how a full disk turned into a working SIEM in a few hours.

2025-09-24T16:40:00+00:00 2025-09-24T21:33:43+00:00 https://cyramos.github.io/posts/PIoC-A-Practical-Fix-For-A-Daily-Pain/ Tomer (Ramos) Zamir

On paper, working with multiple threat intelligence feeds / vendors sounds great. More visibility, more coverage, more data. But in practice, it often turns into a daily headache. If you have ever worked in threat intel or SOC investigation, you will be familiar with the drill. Feeds from different vendors keep coming, you have CSVs piling up, and suddenly, you have so many indicators that all...

2025-02-12T00:00:00+00:00 2025-05-18T14:05:55+00:00 https://cyramos.github.io/posts/Why-Financial-Institutions-Should-Watch-LockBit-in-2025/ Tomer (Ramos) Zamir

If you’re advising clients in the financial sector—especially those based in North America—one question should be front and center as we head into 2025: Which ransomware group poses the most significant risk to their business? Ransomware-as-a-Service (RaaS) models have made it easier for threat actors to launch attacks, and one name stands out: LockBit. In this post, we’ll explore why LockBit r...

2025-02-10T15:14:00+00:00 2025-05-17T17:37:55+00:00 https://cyramos.github.io/posts/one-telegram-message-one-ddos-group-what-can-we-uncover/ Tomer (Ramos) Zamir

What Can We Learn from Cybercrime Forum Posts? When browsing through cybercrime forums or encrypted messaging platforms, have you ever stopped to really examine what’s being shared? These posts—often written in coded language or filled with technical jargon—can contain a goldmine of information for investigators and analysts. But what exactly makes them so interesting? And more importantly, wha...