Documentation.
Technical documentation, procedures and reference material covering infrastructure, SOC operations and cybersecurity.
Security order for a small business
A sensible work order for a 5–30 person firm: accounts and MFA, email, exposure, backup — SIEM only after that.
OPEN DOCUMENTATION → SOCSOC L1 overview
Monitoring, triage, escalation, a note. An alert is not an incident.
OPEN DOCUMENTATION → SECURITY-BASELINESMicrosoft 365 / Google Workspace baseline for SMEs
Minimum mail and identity controls in Microsoft 365 or Google Workspace for a small or mid-size firm — without buzzwords.
OPEN DOCUMENTATION → WAZUHWazuh basics
Agent, manager, indexer, dashboard. An alert is born from a log, not a wish.
OPEN DOCUMENTATION → GOVERNANCEKSC / NIS2 for SMEs — without scare tactics
What KSC and NIS2 actually imply for a small or mid-size firm in Poland, and what is a sales slogan for “you must buy a SOC”.
OPEN DOCUMENTATION → LINUXLinux logs for SOC
journald, auth, syslog. Time, host, process, user — before an alert exists.
OPEN DOCUMENTATION → WINDOWSWindows logs for SOC
Security, System, PowerShell. The channel and audit policy must be on, or the Event ID sheet lies.
OPEN DOCUMENTATION → SECURITY-BASELINESMinimum administrator account standard
A short standard for creating, using, protecting, and removing accounts with administrative privileges.
OPEN DOCUMENTATION → NETWORK-SECURITYSafely publishing a service to the internet
A procedure for preparing, approving, launching, reviewing, and decommissioning an internet-facing business service.
OPEN DOCUMENTATION → INCIDENT-RESPONSELost work phone runbook
A concise procedure for the employee, manager, and IT after a work phone is lost or stolen.
OPEN DOCUMENTATION → BACKUP-RECOVERYBackup restore test — safe procedure
A detailed safe backup restore test procedure covering authorisation, isolation, restore-point selection, validation, evidence, cleanup, and retesting.
OPEN DOCUMENTATION → EMAIL-SECURITYStaged SPF, DKIM, and DMARC rollout without interrupting legitimate mail
A practical plan to inventory senders, enable DMARC reporting, and move safely from p=none through quarantine to reject.
OPEN DOCUMENTATION →Not sure where to start?
Pick a quote, consultation or engagement path — or describe the problem now. No obligation to sign.