Search for a command to run...
I’ve attempted to blog on and off for many years via Wordpress instances. Here I’m hoping to be a bit more consistent as I don’t have to worry about the underlying infra…I don’t have to do anything to maintain the side other than write occasionally.
So my plan is to share general experiences and things I’ve learned along the way in the hopes that it may help others. Maybe it will. Maybe it won’t. All feedback is appreciated. Want to know more? Just ask.
I need to be upfront about something before we get into this: I have tried to self-host my own infrastructure more times than I can count. And every single time, I've eventually gone back to SaaS. Not
I love DNS. I know that's a weird thing to say, but I've been doing DFIR and detection engineering for close to two decades, and no single protocol has given me more signal per dollar invested than DN
I've spent the better part of two decades in cybersecurity — starting in entry-level IT, working through the trenches of incident response and threat detection, and eventually moving into engineering
I'm going to tell you a story about how I compressed a multi-week detection engineering project into a single 45-minute session. And then I'm going to tell you exactly how I did it—because I think thi
As someone who's spent nearly two decades in cybersecurity—responding to breaches, hunting threats across enterprise networks, and teaching DFIR at SANS—I've watched the industry oscillate between "mo
