Intro to IaC - Declarative vs Imperative, Lifecycle, and Virtualisation Primitives

Technical walkthrough of TryHackMe Intro to IaC covering declarative vs imperative models, agent vs agentless architectures, mutable vs immutable patterns, the IaCLC lifecycle, and cloud vs on-prem tradeoffs.

Jun 3, 2026 TryHackMe, DevSecOps Learning Path

Day 15: SAST with Semgrep - Finding Vulnerabilities in Source Code

A full walkthrough of Semgrep for static application security testing - running scans, writing custom rules, understanding findings, and integrating into GitHub Actions as a PR gate.

Jun 3, 2026 DevSecOps, Week3

Container Hardening - Daemon Protection, Cgroups Limits, Seccomp, AppArmor, and Grype Image Auditing

Technical walkthrough of TryHackMe Container Hardening covering Docker daemon protection via SSH contexts and mutual TLS, cgroup resource quotas, Seccomp syscall filtering, AppArmor MAC profiles, compliance frameworks, and Grype vulnerability scanning.

Jun 2, 2026 TryHackMe, DevSecOps Learning Path

AWS RDS and Aurora - Managed Relational Databases, Multi-AZ, and Read Replicas

A full walkthrough of AWS RDS and Aurora - supported engines, Multi-AZ, read replicas, automated backups, encryption, RDS Proxy, and Aurora Serverless

Jun 2, 2026 AWS Learning Path, Database

TryHackMe: One Piece Room Walkthrough

Complete walkthrough of the One Piece room on TryHackMe. Anonymous FTP, steganography, multi-layer cipher decoding with CyberChef, custom Gobuster wordlists, and Python SUID privilege escalation.

Jun 2, 2026 TryHackMe, Labs

Container Vulnerabilities - Breakouts via Privileged Capabilities, Docker Sockets, Exposed TCP, and Host Namespaces

Technical walkthrough of TryHackMe Container Vulnerabilities exploring container breakouts through CAP_SYS_ADMIN cgroup release_agents, mounted Docker Unix sockets, unauthenticated remote TCP daemons, and shared host PID namespaces via nsenter.

Jun 2, 2026 TryHackMe, DevSecOps Learning Path

Intro to Kubernetes - Cluster Architecture, Declarative YAML, Kubectl Operations, and RBAC Hardening

Technical walkthrough of TryHackMe Intro to Kubernetes covering control plane and worker node architecture, declarative YAML manifests, core kubectl commands, secret decoding, and RBAC policy enforcement.

Jun 1, 2026 TryHackMe, DevSecOps Learning Path

Intro to Docker - Image Lifecycle, Dockerfiles, Compose Orchestration, and Socket Architecture

Comprehensive technical walkthrough of TryHackMe Intro to Docker covering image manipulation, container runtime flags, Dockerfile layer optimization, multi-container orchestration with Docker Compose, and Docker socket IPC architecture.

May 31, 2026 TryHackMe, DevSecOps Learning Path

AWS EBS and EFS - Block Storage, Shared Filesystems, and FSx

A full walkthrough of AWS block and file storage - EBS volume types, snapshots, encryption, EFS shared filesystems, performance modes, and Amazon FSx

May 31, 2026 AWS Learning Path, Storage

Intro to Containerisation - Docker Architecture, Linux Namespaces, and Process Isolation

Comprehensive technical walkthrough of TryHackMe Intro to Containerisation covering OS-level virtualization, Docker Engine architecture, Linux kernel namespaces, PID isolation, and container security boundaries.