Cybersecurity notes from Jessie Gonzalez on Azure, Entra ID, SIEM, and AI security.
New to Cybersparks? Start with the Entra ID to Security Onion guide to see how cloud sign-in logs reach a SIEM. Then read the Shodan overview to learn what attackers can see about your devices. If you want the basics first, the Security Basics category explains common threats in plain English.
-
Building a Secure Microsoft Entra ID Logging Pipeline into Security Onion Using Azure Event Hubs
Jessie Gonzalez shows how to send Microsoft Entra ID sign-in and audit logs into Security Onion through Azure Event Hubs, with least-privilege access.
-
Resources for Keeping Informed in 2025
The yearly threat reports and news sites Jessie Gonzalez reads to stay current: Mandiant M-Trends, CrowdStrike, Verizon DBIR, and Krebs on Security.
-
Shodan Explained: What Exposed Devices Reveal Online
Shodan is a search engine for internet-connected devices. See what it reveals about exposed cameras, servers, and controllers, and how to fix it.
-
Windows Print Spooler Flaws: From CVE-2020-1048 to PrintNightmare
How the Windows Print Spooler bug CVE-2020-1048 let a normal user gain full control, and how it led to the PrintNightmare flaws of 2021 and their fixes.
-
A Brief Overview of the Tails, seL4, and Qubes Secure Operating Systems
A plain-English comparison of three security-focused systems: Tails for privacy, Qubes OS for isolated work, and seL4, a mathematically verified kernel.
-
The Current State of Key Logging in 2024
What keyloggers are, why parents and employers use them, how attackers abuse them to steal passwords, and why Jessie Gonzalez argues for clear laws.
Get practical cybersecurity tips in your inbox
One short email when I publish something new. Plain English, no spam, and you can unsubscribe anytime.
Get in touch.
For cybersecurity consulting inquiries, get in touch. I’d love to hear what you’re working on. About Jessie Gonzalez, M.S.
