Verified security briefings, practical guides, and operational playbooks for video, access, IT, identity, networks, and cybersecurity.
Foundational explainers and practical playbooks for common security and technology decisions.
Use the NIST Cybersecurity Framework to organize decisions across governance, protection, detection, response, and recovery.
Open the guide Protect identitiesUnderstand stronger authenticationCompare MFA, passkeys, phishing resistance, and account recovery without treating any one control as a guarantee.
Open the explainer Prepare to recoverTurn backups into tested restorationConnect protected copies, recovery ownership, exercises, and evidence to the services the business actually needs.
Open the checklist Secure connected systemsBuy with the full lifecycle in mindAsk better questions about identity, configuration, updates, support, security state, and end-of-life before deployment.
Open the guideDSE articles identify a primary reference, its publication date when available, and the date our editorial team last reviewed the guidance. Source facts and DSE recommendations are labeled separately.
Every count below is drawn from the governed DSE library.
Connect DNS inventory, origin trust, Full (strict), origin authentication, certificate renewal, and HSTS recovery across six source-backed checkpoints.
CISA Update A revises critical guidance for Johnson Controls C-CURE 9000 and victor. Review CVE-2026-21655, adjacent-network exposure on port 8999, affected versions, fixed releases, and temporary mitigations.
Read the briefing
A public, read-only knowledge hub where DSE turns selected, source-backed physical security, IT, and cybersecurity developments into practical guidance.
Read the explainer
Make the intended Wazuh dashboard result population explicit with parentheses. Preserve case-sensitive fields and lowercase Boolean separators, and validate any separately needed API query on its own terms.
Read the guide
Treat Wazuh group membership as ordered when centralized settings conflict. Review shared-file replacement and distinguish adding a group from resetting the membership list.
Read the guide
Check the indexer permissions and separate Wazuh server role mapping for a read-only internal user. Include the documented run_as and dashboard refresh requirements in the validation plan.
Read the guide
Separate Wazuh raw archive retention from dashboard indexing. Review JSON archiving, Filebeat and the archive index pattern together, with capacity and deletion ownership defined first.
Read the guide
Keep Wazuh's default future journal collection separate from the documented stopped-collector history option. Define a backfill boundary and verify actual event identities instead of promising all historical records.
Read the guide
Identify whether Wazuh drops involve secure agent communication or an event-specific analysis queue before tuning capacity. Do not apply queue_rd sizing to remote syslog input.
Read the guide
Distinguish registry change detection from exact-content reports. Review the documented supported value types, scheduled-scan boundary and local diff-copy storage before enabling Wazuh report_changes.
Read the guide
Preserve Wazuh anti-tampering's Linux-only package-removal scope. Plan authorized removal and the documented temporary-token alternative before enabling manager validation on endpoints.
Read the guide