About Cyber Unboxed
Cybersecurity, unboxed for everyone.
Cyber Unboxed is a knowledge site that explains attacks, concepts, tools, threat actors and AI in plain language, for curious people who are not security professionals, and for the ones who want a clear refresher.
Cybersecurity, explained without the cybersecurity degree.
A library that explains, not impresses
Security is usually explained by experts, for experts, in words that keep everyone else out. Cyber Unboxed does the opposite: it takes one topic at a time, opens it up, and shows how it works, what it looks like in real life and what to do about it.
Every article opens with an “Explain Like I'm Not a Hacker” box you can flip between Normal Human, which uses everyday analogies, and Technical, which uses the precise terms professionals use.
Better awareness, a safer internet
Most attacks succeed because someone did not know what to look for, not because the attacker was brilliant. The gap is understanding, and understanding is something anyone can build.
Because knowledge builds better decisions, and a safer digital world.
Four ways in
- LearnConcepts from zero, one at a time: fundamentals, attacks, the SOC and threat intelligence.20 articles
- ThreatsThe Threat Atlas and in-depth pages on ransomware, phishing, credential attacks and more.6 threat guides · 11 articles
- ToolsWhat common security tools are for, who uses them and when an analyst reaches for them.9 tools explained
- AI × CyberHow AI helps defenders, how AI systems get attacked, and experiments you can run yourself.18 articles
The same clear shape, every time
Once you have read one article you know how to read them all. Each follows the same six parts, so you can skim to the one you need.
- 1
In one sentence
The whole idea, before any detail.
- 2
The 30-second explanation
A quick version for when you are short on time.
- 3
How it works
Numbered steps and a short narrative.
- 4
Real-world example
A concrete situation, without invented incidents.
- 5
How to spot it
Four signs worth noticing.
- 6
What to do
Three clear next steps.
What you can count on
Plain language first
Every idea is explained in everyday words, with the technical terms introduced as you go.
No invented facts
No made-up statistics, no incidents attributed to named groups, and no claims that are not supported.
Honest about limits
Where something is uncertain, changing quickly or experimental, the article says so.
Practical by default
Each article ends with what you can actually do, not just what to worry about.
Created and written by Taha Chatriwala
Taha is a cybersecurity analyst based in the UAE who writes Cyber Unboxed as a personal project, turning what he learns and works on into explanations that anyone can follow.
Also built by the author
A hands-on project that puts what the site writes about into practice.
SOC Analyst Workstation
Security Operations Center Assistant
A production triage platform built to accelerate alert analysis: safely mask indicators of compromise, audit suspicious emails, build precise SIEM queries, inspect multi-provider threat intelligence feeds, and compile incident reports.
Live services
- VirusTotal API v3Configured
- AbuseIPDB API v2Configured
- AI triage modelGemini 2.5
Six core security modules
- 01
IOC Masker
DeterministicTurns raw IPs, URLs, domains, hashes and emails into non-clickable, defanged strings for safe sharing.
- 02
IOC Reputation Checker
Live multi-providerQueries VirusTotal and AbuseIPDB live, with single or bulk IOC support and provider selection.
- 03
Email Analyzer
MIME & headersUpload .eml or paste raw headers. Traces delivery hops, checks SPF/DKIM/DMARC, inspects attachments and extracts links.
- 04
Smart Investigator
Alert triageStructured alert understanding, prioritised checklists, required data sources and MITRE ATT&CK mappings.
- 05
Query Studio
SPL / KQL / AQLGenerates SIEM queries from natural language, optimises slow filters and converts between SPL, KQL, AQL and Elastic.
- 06
Incident Report Generator
Executive readyCompiles multi-section reports from verified facts, active indicators and timeline findings, with export options.
Let's connect
Have a question, idea or topic you would like explained?
I would love to hear from you. Let's build a safer, smarter digital world together.