Zenarmor

14
Jan
Digital illustration of a server room. Glowing blue network paths converge on an isolated, glowing red cube. A text overlay reads "TRAP SPRUNG: PID ISOLATED," symbolizing threat containment.

Threat Hunting in the Homelab

When Zenarmor flagged a high-severity beacon, I feared my NAS was infected. It wasn't. Here is the step-by-step threat hunt of how I tracked down a malware implant inside a compromised Docker container using tcpdump—and the supply chain mistake that let it in.
6 min read
19
Nov
Screenshot of the Zenarmor threat dashboard, showing Top Detected, Allowed, Blocked and Destinations.

OPNsense Layer-7 Control: A Deep Dive into Zenarmor (Part 3)

In Part 1, we built the firewall (Layer 3/4). In Part 2, we hardened it with user accounts, 2FA,
10 min read