Aisha Okonkwo

Infrastructure security architect at a hyperscaler. Spends her days on Zero Trust, secrets management, and yelling at unencrypted backups.

Articles by Aisha Okonkwo

Tools & Libraries Sept 14, 2026Advanced

Linux SSH Session Recording in 2026: Teleport vs tlog vs Sudo I/O Logs Compared

Which Linux SSH session recorder fits your threat model? Compare Teleport, tlog, and sudo I/O logs with working configs and compliance mapping.

Aisha Okonkwo 16 min read

Tutorials Aug 23, 2026Advanced

Sigma Rules for Linux Threat Detection in 2026: Detection-as-Code with pySigma, Zircolite, and SIEM Backends

Sigma turns Linux auditd, journald, sshd, and sudo events into portable YAML detections that compile to any SIEM. Learn pySigma, sigma-cli, Zircolite, and CI patterns for detection-as-code in 2026.

Aisha Okonkwo 15 min read

Tutorials Aug 04, 2026Advanced

Immutable Linux Backups in 2026: Restic vs Borg vs Kopia with S3 Object Lock

Restic, Borg, and Kopia compared for ransomware-resistant Linux backups in 2026, with S3 Object Lock, append-only SSH, and the 3-2-1-1-0 rule wired end-to-end.

Aisha Okonkwo 17 min read

Tutorials Jun 10, 2026Advanced

Kata Containers vs gVisor in 2026: Sandboxed Container Runtimes on Linux

Kata Containers and gVisor both sandbox Linux containers but use very different mechanisms. This 2026 guide compares their isolation models, performance overhead, Kubernetes RuntimeClass setup, and when to pick each runtime for production workloads.

Aisha Okonkwo 14 min read

Tutorials Jun 02, 2026Advanced

SPIFFE and SPIRE on Linux: Workload Identity and mTLS Without Long-Lived Secrets (2026)

SPIFFE and SPIRE give Linux workloads short-lived, verifiable identities (SVIDs) for mTLS and JWT auth, replacing long-lived API keys and secrets.

Aisha Okonkwo 15 min read