Introductions of the most grandiose kind Ladies, gentlemen, and all others of varying degrees of morality that may disqualify you from the first 2 categories, welcome back to the little corner of ...

Why this post There have been more and more “discussions” recently that have crossed my radar in the Twitter-sphere talking about OST (offensive security tools), and the morality surrounding such ...

A Brief History of Time One benefit of being around the InfoSec industry for a while is that you get a longer snapshot of time to observe trends, mindsets, and methodologies. You get to watch, over...

Non-Original Intro There are a couple different ways that people can work with detections. This is a follow-on article to my other post on detections. There are different ways that you can build a...

I am one biased dude Let’s be honest, I am biased. You are biased. Repeat after me kiddos, points to the blackboard “he, she, we are biased”. There are a plethora of things that contribute to thi...

Your detections aren’t working…at least, that should be your going assumption. Let’s take a look at a potential scenario some companies may find themselves in… Data is coming in ${somewh...

If you look at the make-up of a blade, it consists of a piece of metal where two opposing sides of it are carefully filed to specific angles to create an edge at a specific degree. If the two sid...

Why this post Go to any SOC or blue team or similar org and look at multiple analysts. Over time you will probably identify some analysts “do better” than others. There are a variety of reasons wh...

Why this post There are a plethora of specialities within InfoSec, many of which have a number of learning resources dedicated to them. However, one aspect that I believe is fundamental to many of...