A Practical Risk Model for Cloud Detection and Logging
A practical security engineering field guide to cloud detection and logging, covering risk, implementation, evidence, and team leadership.
Nathan Berg
Container Breakout Detection with eBPF and Tracee
Containers are not VMs. If an attacker escapes the container boundary, they often gain access to the host. eBPF-based sensors give you a low-level view of kernel activity and make it possible to de...
A Practical Failure Exercise for Cloud Network Security
A practical security engineering field guide to cloud network security, covering risk, implementation, evidence, and team leadership.
Cloud Network Security in Production: Signals That Show the Control Works
A practical security engineering field guide to cloud network security, covering risk, implementation, evidence, and team leadership.
Implementing Cloud Network Security Without Slowing Delivery
A practical security engineering field guide to cloud network security, covering risk, implementation, evidence, and team leadership.
Failure Modes in Cloud Network Security: A Design-Level Analysis
A practical security engineering field guide to cloud network security, covering risk, implementation, evidence, and team leadership.
Defining the Security Outcome for Cloud Network Security
A practical security engineering field guide to cloud network security, covering risk, implementation, evidence, and team leadership.
A Team Playbook for Improving Cloud Identity and Access Management
A practical security engineering field guide to cloud identity and access management, covering risk, implementation, evidence, and team leadership.
Threat Intel Enrichment with STIX/TAXII and Python
Threat intelligence is only useful if you can operationalize it. STIX provides a standard data model for indicators, and TAXII provides an API to move those indicators between systems. In a lab, yo...
Operating Cloud Identity and Access Management: Ownership, Evidence, and Exceptions
A practical security engineering field guide to cloud identity and access management, covering risk, implementation, evidence, and team leadership.