Operating Cloud Data Protection: Ownership, Evidence, and Exceptions
A practical security engineering field guide to cloud data protection, covering risk, implementation, evidence, and team leadership.
Nathan Berg
Engineering Cloud Data Protection into the Paved Road
A practical security engineering field guide to cloud data protection, covering risk, implementation, evidence, and team leadership.
An Architecture Review Playbook for Cloud Data Protection
A practical security engineering field guide to cloud data protection, covering risk, implementation, evidence, and team leadership.
Linux Binary Hardening: RELRO, PIE, NX, and CET
Binary hardening is one of the most reliable ways to reduce exploitability. Modern Linux toolchains can add protections like RELRO, PIE, NX, and CET with simple build flags. In a lab, you can compi...
Cloud Data Protection: What the Team Must Decide Before Building
A practical security engineering field guide to cloud data protection, covering risk, implementation, evidence, and team leadership.
How to Lead a Review of Cloud Detection and Logging
A practical security engineering field guide to cloud detection and logging, covering risk, implementation, evidence, and team leadership.
Measuring Cloud Detection and Logging Without Vanity Metrics
A practical security engineering field guide to cloud detection and logging, covering risk, implementation, evidence, and team leadership.
Turning Requirements for Cloud Detection and Logging into Delivery Guardrails
A practical security engineering field guide to cloud detection and logging, covering risk, implementation, evidence, and team leadership.
Kerberos Attack Lab: AS-REP Roasting and Detection
AS-REP roasting is one of the most practical Kerberos attacks because it does not require domain admin rights. If a user account has preauthentication disabled, an attacker can request an AS-REP an...
Designing Cloud Detection and Logging: Trust Boundaries, Failure Modes, and Tradeoffs
A practical security engineering field guide to cloud detection and logging, covering risk, implementation, evidence, and team leadership.