The Cybersec Café

Your SOC is not an IT Helpdesk. So Stop Running it like One.

I Wish I Knew This When I Started in Cybersecurity

Cybersecurity is Data: Collect, Analyze, Interpret

Day in the Life of a Security Engineer

Understanding the Full Spectrum of Threat Indicators

Cloud Security Fundamentals: IAM, RBAC, PoLP, and more…

How to Actually Leverage the MITRE ATT&CK Framework in Security Operations

The Playbook for Playbooks

Tuning Detections isn’t Hard Unless You Make it Hard

Security Engineer Starter Guide: Security Operations

5 Lessons Learned as Incident Commander of the Biggest Security Incident of My Career

My Log Source-Agnostic Methodology to Understanding Big Data