Resources.
Checklists, decision cards and free tools. The material stays open. If you want this implemented at work or at home, use the form.
TOMEK.ST // GAME
Port Defender
Block hostile traffic before it reaches the server. Let legitimate packets through.
15-minute home network review card
One page to record the router model, firmware, Wi-Fi settings, guest network, devices, exposed services, and configuration backup.
OPEN RESOURCE → CHECKLISTA friend messages you about money
A short list before you send a BLIK code or a text-message code to someone writing on Messenger.
OPEN RESOURCE → CHECKLISTA payment link from OLX or Marketplace
A short list before you click a link pasted next to an ad to collect money, pay a deposit, or confirm a courier.
OPEN RESOURCE → REFERENCEA second antivirus is usually not worth installing
On a current Windows PC, Defender already scans. Another consumer product adds a driver, not a new decision.
OPEN RESOURCE → CHECKLISTAccount takeover emergency card
A short action order after an email, social, or other account is taken over: sessions, password, MFA, recovery details, and records.
OPEN RESOURCE → WORKSHEETBackup restore test worksheet
A restore drill worksheet for the system, restore point, isolated location, timing, integrity, dependencies, result, and owner.
OPEN RESOURCE → CHECKLISTBank-detail change and urgent payment verification card
A one-page check for changed supplier bank details or an urgent payment request: known number, two people, a record, and escalation.
OPEN RESOURCE → WORKSHEETBasic digital forensics worksheet
Intake, copy, observation, fact vs hypothesis. A lab drill, not an expert report.
OPEN RESOURCE → WORKSHEETCompany internet exposure worksheet
A worksheet for assigning each public domain, IP, service, owner, MFA, patch date, business reason, and decision.
OPEN RESOURCE → GUIDEDMDE and Recuva — which loss each one fits
Recuva pulls a freshly deleted file off a healthy volume. DMDE rebuilds the filesystem when the partition is gone or you are working from an image.
OPEN RESOURCE → CHECKLISTFirst odd login — 10 minutes
A short card for non-experts: what to note on a weird sign-in, what not to click, when to call the bank, and when to use the IR form.
OPEN RESOURCE → GUIDEFull-disk encryption with VeraCrypt
FDE locks data on a powered-off disk. VeraCrypt does that on Windows, Linux, and macOS without a vendor account.
OPEN RESOURCE → CHECKLISTIncident response checklist
Short list: intake, facts, decision, note. Not a 24/7 playbook.
OPEN RESOURCE → CHECKLISTLost or stolen phone checklist
A short order of action after losing a phone: locate and lock it, contact the carrier and bank, secure accounts and documents, report theft, and record the IMEI.
OPEN RESOURCE → CHEAT-SHEETNetwork troubleshooting cheat sheet
Order: interface, address, gateway, DNS, route, service. Guessing comes last.
OPEN RESOURCE → CHECKLISTPasskey and MFA migration checklist
A safe path to passkeys or new MFA: critical accounts, backup sign-in, a second key, recovery codes, and an emergency test.
OPEN RESOURCE → CHECKLISTRansomware first-hour decision card
A card for recording the host, time, isolation, shares, accounts, backups, decision owner, and external contact.
OPEN RESOURCE → TEMPLATESample security assessment report shape
What an assessment deliverable looks like: scope, facts, priorities and recommendations — no security percentage and no invented client brand.
OPEN RESOURCE → REFERENCEShould I allow remote access? Decision tree
Six questions before starting AnyDesk, TeamViewer, or another remote desktop — plus a short path after a mistake.
OPEN RESOURCE → CHECKLISTSOC L1 Home Lab checklist
Free checklist: host, endpoints, logs, Wazuh, an exercise note.
OPEN RESOURCE → CHECKLISTThe first minutes after a code or a password
What to do at once when a BLIK code, a text-message code, or a bank password has already gone into a chat or onto a fake page.
OPEN RESOURCE → CHECKLISTVendor access checklist
Accounting, software house, remote desktop: who has access, for how long, how you revoke it.
OPEN RESOURCE → GUIDEVirusTotal — the site, the extension, the desktop app
Many engines on one hash before you double-click. The extension and the desktop app shorten that check. Other people's data does not get uploaded.
OPEN RESOURCE → TEMPLATEWazuh rule review template
Before you enable a rule: condition, test, false positive, owner.
OPEN RESOURCE → CHECKLISTWhat an insurer will ask (security)
A short list of questions that come back with cyber insurance: MFA, backup, who handles incidents — without selling a policy.
OPEN RESOURCE → REFERENCEWho does what in an incident
When to call the bank, CERT, police, the DPA, and when the provider or tomek.st is enough — without mixing roles.
OPEN RESOURCE → CHEAT-SHEETWindows Event Log cheat sheet
Event IDs worth knowing at L1 — always with host, account and time, never the number alone.
OPEN RESOURCE →Not sure where to start?
Pick a quote, consultation or engagement path — or describe the problem now. No obligation to sign.