Failure Modes in Container Security: A Design-Level Analysis
A practical security engineering field guide to container security, covering risk, implementation, evidence, and team leadership.
Nathan Berg
Defining the Security Outcome for Container Security
A practical security engineering field guide to container security, covering risk, implementation, evidence, and team leadership.
A Team Playbook for Improving Infrastructure as Code Security
A practical security engineering field guide to infrastructure as code security, covering risk, implementation, evidence, and team leadership.
Practical YARA Engineering for Malware Triage
YARA is the workhorse of malware triage. It lets you express matching logic over bytes, strings, and PE metadata, then scan large corpora quickly. The trick is writing rules that are stable, specif...
Operating Infrastructure as Code Security: Ownership, Evidence, and Exceptions
A practical security engineering field guide to infrastructure as code security, covering risk, implementation, evidence, and team leadership.
Engineering Infrastructure as Code Security into the Paved Road
A practical security engineering field guide to infrastructure as code security, covering risk, implementation, evidence, and team leadership.
An Architecture Review Playbook for Infrastructure as Code Security
A practical security engineering field guide to infrastructure as code security, covering risk, implementation, evidence, and team leadership.
Infrastructure as Code Security: What the Team Must Decide Before Building
A practical security engineering field guide to infrastructure as code security, covering risk, implementation, evidence, and team leadership.
How to Lead a Review of Secrets Management
A practical security engineering field guide to secrets management, covering risk, implementation, evidence, and team leadership.
Windows Telemetry in Depth: Sysmon + WEF in a Lab
If you want serious Windows detection in a home lab, you need structured telemetry. Sysmon gives you high value process, network, and file events. Windows Event Forwarding (WEF) ships those events ...