MacSouverain

Tutorials

Wazuh, write the rule that catches what you're really after

Tutorial Going further MS Pro Episode 2/5

Wazuh, write the rule that catches what you're really after

Writing a custom Wazuh rule isn't about covering everything. It's asking one precise question to a real log, testing it with wazuh-logtest, then shipping it.

Your sovereign SIEM, learn to read it properly then make it act

Tutorial Going further MS Pro Episode 1/5

Your sovereign SIEM, learn to read it properly then make it act

Wazuh is installed and you don't know what to do with it. Three first jobs in the right order, without drowning in alerts.

Mac and Tailscale, your private WireGuard network in 15 min flat

Tutorial Getting started

Mac and Tailscale, your private WireGuard network in 15 min flat

Build an encrypted private network across all your Macs in 15 minutes, without opening a port or touching your router. Install, MagicDNS, remote file access, reaching your services without exposing them, the real limits.

Put your local AI to work, no cloud

Tutorial Getting started AI

Put your local AI to work, no cloud

Your local model exposes an OpenAI-compatible API, right at home. Wire it to your real tasks with Shortcuts or Python, without any SaaS ever seeing your data.

Alerting and total cost, the final tally of your sovereign SIEM

Tutorial Going further MS Pro Episode 7/7

Alerting and total cost, the final tally of your sovereign SIEM

Wire up Wazuh alerting without drowning in noise, then the honest bottom line on your sovereign stack against a SaaS bill six to thirty times heavier.

A blue glass door left ajar in the flank of an Apple Silicon chip, a thread of golden light leaking through the gap.

MCP servers, the backdoor into your AI

MCP servers give your AI real access to your Mac: files, shell. Handy, but it's a backdoor. Here's how to lock it down.

Rspamd in front of your inbox, phishing stops at the doormat

Tutorial Going further MS Pro Episode 5/7

Rspamd in front of your inbox, phishing stops at the doormat

Install Rspamd in front of your mail server, tune the anti-spam and anti-phishing scoring, and feed every verdict into your Wazuh SIEM.

CrowdSec up front, blocking before they hit you

Tutorial Going further MS Pro Episode 4/7

CrowdSec up front, blocking before they hit you

Install CrowdSec on your hardened VPS, block malicious IPs upstream with the bouncer firewall, and feed its decisions into Wazuh.

Install your first AI model locally on Mac

Tutorial AI Episode 2/2

Install your first AI model locally on Mac

"An AI model that runs 100% offline on your Mac Apple Silicon, in 20 minutes, without typing a single command. Install LM Studio, pick a model in MLX, enter your first prompt, then the ultimate test: cut the Wi-Fi."

Deploy Wazuh everywhere, your SIEM finally sees your network

Tutorial Going further MS Pro Episode 3/7

Deploy Wazuh everywhere, your SIEM finally sees your network

Enroll Wazuh agents on your Linux servers, Macs, and Windows workstations, with log upload via Tailnet, never through the open internet.

Wazuh: Your all-in-one, homegrown Splunk for the price of a VPS

Tutorial Going further MS Pro Episode 2/7

Wazuh: Your all-in-one, homegrown Splunk for the price of a VPS

Install Wazuh (manager, indexer, dashboard) on a single node, harden passwords and dashboard in Tailnet-only, adjust JVM heap, initial dashboards without agents.

Your AI can be turned off by the US, build your own

Tutorial AI Episode 1/2

Your AI can be turned off by the US, build your own

Access to cutting-edge AI models is becoming an American geopolitical lever. Here's what's running locally on your Mac, with 16 to 32GB RAM, and why that's your real foundation.

Your sovereign SIEM's foundation, a hardened VPS outside the CLOUD Act

Tutorial Going further MS Pro Episode 1/7

Your sovereign SIEM's foundation, a hardened VPS outside the CLOUD Act

A European VPS, Cloud Act-proof, hardened SSH, reduced attack surface via Tailscale, off-site encrypted backups.

Build your sovereign SIEM for SMEs, compliant with GDPR/NIS2 without CLOUD Act

Tutorial Going further MS Pro Episode 0/7

Build your sovereign SIEM for SMEs, compliant with GDPR/NIS2 without CLOUD Act

You're already forced by GDPR to detect a breach within 72 hours. NIS2 just widened the net by 30x. Build your SIEM now, it's security today and compliance amortised before it lands on you.

Switching from Gmail to ProtonMail on Mac

Tutorial Getting started

Switching from Gmail to ProtonMail on Mac

Switching from Gmail to ProtonMail on Mac without losing any emails. Import, redirect, contacts, native app or Bridge, the whole process step-by-step.

Why your mail client is a sieve, and how to fix it

Tutorial Getting started

Why your mail client is a sieve, and how to fix it

Spy Pixels, HTML Exploits, Outlook Zero-Days. Your Email's Attack Surface is Way Bigger Than "Gmail Reads You". Comprehensive Guide to Fix It.

Proton Bridge + Apple Mail on Mac: Encryption Without Compromise

Tutorial Getting started

Proton Bridge + Apple Mail on Mac: Encryption Without Compromise

How to Set Up Proton Bridge with Apple Mail on Mac. Installation, Exact Settings, Troubleshooting. Zero-Knowledge Encryption + Native Interface.