170+ Technical Deep-Dives
Comprehensive engineering technical breakdowns covering low-level kernel performance, Anycast routing, eBPF scrubbing, and high-availability database architecture.
Automated Vulnerability Management with DefectDojo and Trivy Operator
Comprehensive technical breakdown of automated vulnerability management with defectdojo and trivy operator. Written by Rishith Lal for ArzenLabs systems research.
Defending Against BGP Route Hijacking with RPKI Route Origin Authorization (ROA)
Comprehensive technical breakdown of defending against bgp route hijacking with rpki route origin authorization (roa). Written by Rishith Lal for ArzenLabs systems research.
eBPF-Based Runtime Threat Detection with Falco in Production K8s
Comprehensive technical breakdown of ebpf-based runtime threat detection with falco in production k8s. Written by Rishith Lal for ArzenLabs systems research.
Secrets Management at Scale: HashiCorp Vault Secrets Engine and Dynamic DB Credentials
Comprehensive technical breakdown of secrets management at scale: hashicorp vault secrets engine and dynamic db credentials. Written by Rishith Lal for ArzenLabs systems research.
Hardware Security Modules (HSM) Integration with PKCS#11 for DNSSEC Signing
Comprehensive technical breakdown of hardware security modules (hsm) integration with pkcs#11 for dnssec signing. Written by Rishith Lal for ArzenLabs systems research.
Identity-Aware Proxy (IAP) Implementation for SSH and Web Services
Comprehensive technical breakdown of identity-aware proxy (iap) implementation for ssh and web services. Written by Rishith Lal for ArzenLabs systems research.
Linux Kernel Hardening with KSPP: Memory Sanitization and Kernel Lockdowns
Comprehensive technical breakdown of linux kernel hardening with kspp: memory sanitization and kernel lockdowns. Written by Rishith Lal for ArzenLabs systems research.
Static and Dynamic Malware Analysis Pipeline with Cuckoo Sandbox and Volatility
Comprehensive technical breakdown of static and dynamic malware analysis pipeline with cuckoo sandbox and volatility. Written by Rishith Lal for ArzenLabs systems research.
Network Segmentation Strategy: Microsegmentation with Calico and eBPF
Comprehensive technical breakdown of network segmentation strategy: microsegmentation with calico and ebpf. Written by Rishith Lal for ArzenLabs systems research.
Memory-Safe System Programming: Migrating C/C++ Infrastructure Components to Rust
Comprehensive technical breakdown of memory-safe system programming: migrating c/c++ infrastructure components to rust. Written by Rishith Lal for ArzenLabs systems research.
Automated Threat Intelligence Aggregation using MISP and OpenCTI
Comprehensive technical breakdown of automated threat intelligence aggregation using misp and opencti. Written by Rishith Lal for ArzenLabs systems research.
WAF Defense In Depth: NGINX ModSecurity v3 with CRS v4 Rulesets
Comprehensive technical breakdown of waf defense in depth: nginx modsecurity v3 with crs v4 rulesets. Written by Rishith Lal for ArzenLabs systems research.