Clear thinking becomes clear writing;
one can’t exist without the other

William Zinsser

Notes on detection, cloud-native security, and how attacks actually work.

DetectionCloud SecurityMalwareAutomation

What I do

I started boxing as a kid because I wanted to know how to protect myself. Later I worked in physical security — access, perimeter, control. The same question one level up: not my own body, but a building.

Then the threats moved online. No fence, no badge, no camera. I have worked in cyber security ever since.

Nowadays the perimeter changed, but the question has not changed: how do you tell that someone is inside, and how do you catch them the next time.

That is what I write about here!

The standard

A piece here should teach you a mechanism, not summarise an event. If you finish one knowing what happened but not how, it failed.