ECOSYSTEM
SECURITY
Defensive systems for protecting devices, networks, and private workshop infrastructure.
G0T is the security agent.
G0T AT WORK
Security you can check
G0T
Security Agent
Defensive Systems Core
G0T helps secure the workshop’s systems from the ground up. It can review a server configuration, reduce unnecessary exposure, run scheduled integrity checks, and turn technical findings into clear reports.
It works through isolated access, key-based authentication, routine audits, and monitoring. The aim is not to promise perfect security. It is to make the state of a system easier to inspect, maintain, and improve.
- Host audits: Run scheduled checks with Lynis, AIDE, debsums, and related tools, then turn findings into plain-language reports.
- Log review: Separate useful security signals from routine system noise.
- Camera alerts: Send a motion snapshot or short clip to an approved device.
- Security briefings: Track relevant infrastructure threats and summarise useful updates.
- Privacy architecture: Help plan more private setups for individuals and workshop systems.
- Ethical security practice: Use legal labs and training environments to learn how attacks work and how to defend against them.
Security is built from things you can verify: system checks, log review, integrity monitoring, clear access rules, and regular maintenance.
FOUNDATIONS
Read these first
Start with the sources that explain current threats, incidents, and defensive practice with the signal kept clear.
Krebs on Security
Investigative reporting on breaches, fraud, and the criminal economy behind them.
Schneier on Security
Analysis of security, trust, technology, and policy from a long-standing security writer.
The Hacker News
Broad reporting on vulnerabilities, incidents, and security updates.
CISA Advisories
Official advisories and guidance on actively exploited vulnerabilities and major threats.
The DFIR Report
Detailed incident reports that show how real intrusions develop and how teams respond.
Host hardening tools
Useful tools for checking and maintaining Linux systems. Run them only on machines you own or are authorised to administer.
Lynis
Audits a Linux host and highlights configuration issues to review.
AIDE
Tracks changes to selected files and helps spot unexpected modification.
fail2ban
Reduces repeated login attempts by blocking abusive sources.
debsums
Checks installed Debian package files against expected checksums.
rkhunter
A secondary rootkit and backdoor check. Treat findings as signals to investigate, not final proof.
OpenSCAP
A compliance and configuration assessment tool for standards and benchmarks.
PHYSICAL AWARENESS
Watchful cameras
Local cameras and sensors can help you notice activity while every recording stays on your own hardware.
NETWORK DEFENSE
Know what crosses the network
Private networks still need clear boundaries and visibility. These tools help manage firewall rules, inspect traffic, and detect suspicious behaviour.
SAFE PRACTICE
Learn security by doing
Use legal training environments, authorised labs, and your own machines. Learning how attacks work can make you a more capable defender.
PortSwigger Web Security Academy
Free web-security labs with detailed explanations and safe practice targets.
Hack The Box
Hands-on machines and labs for authorised security training.
TryHackMe
Guided security learning paths for beginners and developing practitioners.
OverTheWire
Terminal-based wargames for learning Linux, networking, and security basics.
Hacksplaining
Interactive lessons covering common web-security problems in a safe format.
OWASP Top 10
A regularly updated reference to common web application security risks.
Privacy Guides
Privacy tools and setup guidance reviewed by an open community.
GrapheneOS
A privacy- and security-focused mobile operating system for supported devices.
KEEP LEARNING
Learn by watching
Channels selected for technical explanation, defensive context, and practical security learning.
John Hammond
Malware analysis, incident walkthroughs, capture-the-flag challenges, and hands-on security research.
IppSec
Methodical walkthroughs of authorised Hack The Box machines and practical security techniques.
LiveOverflow
Clear explanations of binary exploitation, web security, and low-level security concepts.
NetworkChuck
Beginner-friendly networking, Linux, and security lab material.