https://malrashid.com/en/notebook Notes on cloud security, identity, zero trust, incident response, pentesting practice, and my home lab. en-us Wed, 11 Nov 2026 00:44:16 GMT https://malrashid.com/en/notebook/advanced-persistence-techniques https://malrashid.com/en/notebook/advanced-persistence-techniques A suspicious startup entry is only a lead. The work is finding out who created it, what it runs, and whether it comes back after cleanup. Tue, 04 Aug 2026 00:00:00 GMT Incident response Malware Persistence https://malrashid.com/en/notebook/my-home-lab https://malrashid.com/en/notebook/my-home-lab Proxmox, local AI, and Plex on one HP Z440, plus the network around them. What I run and what I want to learn next. Fri, 12 Jun 2026 00:00:00 GMT Home lab Networking AI security https://malrashid.com/en/notebook/securing-ai-agents-dangers-of-openclaw https://malrashid.com/en/notebook/securing-ai-agents-dangers-of-openclaw An agent with tools can change real systems. I care more about the authority we give it than about a prompt telling it to behave. Sat, 10 May 2025 00:00:00 GMT AI security Architecture https://malrashid.com/en/notebook/canbus-hacking-automotive-security https://malrashid.com/en/notebook/canbus-hacking-automotive-security CAN is a good place to study what makes a message trusted. I'd start in a small virtual lab, with no real vehicle involved. Sat, 12 Apr 2025 00:00:00 GMT Pentesting IoT Automotive https://malrashid.com/en/notebook/zero-trust-networking-and-sase https://malrashid.com/en/notebook/zero-trust-networking-and-sase A different access product won't fix an unclear policy. I'd start with the applications, identities, and failure paths. Tue, 18 Mar 2025 00:00:00 GMT Networking Architecture Zero trust https://malrashid.com/en/notebook/cloud-security-gcp-focus https://malrashid.com/en/notebook/cloud-security-gcp-focus A long list of findings doesn't tell me what to fix first. I want to understand how exposure, identity, and permissions fit together. Tue, 11 Mar 2025 00:00:00 GMT Cloud GCP IAM https://malrashid.com/en/notebook/ctf-retrospective https://malrashid.com/en/notebook/ctf-retrospective As I build pentesting skills, I want my practice notes to explain the reasoning, the dead ends, and what would matter outside the challenge. Mon, 02 Dec 2024 00:00:00 GMT CTF Reverse engineering Cryptography https://malrashid.com/en/notebook/zero-trust-architecture-industrial-iot https://malrashid.com/en/notebook/zero-trust-architecture-industrial-iot A controller can't always run an agent or support modern authentication. That changes where you enforce access, and what you need to test. Thu, 24 Oct 2024 00:00:00 GMT Architecture IoT Zero trust https://malrashid.com/en/notebook/automating-soc-workflows-python https://malrashid.com/en/notebook/automating-soc-workflows-python I'd automate the prep work before I automate any response. A small script should save time without making a security decision harder to review. Tue, 04 Jun 2024 00:00:00 GMT Automation Incident response Python https://malrashid.com/en/notebook/hardware-security-keys-2024 https://malrashid.com/en/notebook/hardware-security-keys-2024 I like phishing-resistant authentication. I also want to know what happens when someone loses the key or changes devices. Mon, 04 Mar 2024 00:00:00 GMT IAM Authentication Hardware