Clear thinking becomes clear writing;
one can’t exist without the other
— William Zinsser
Notes on detection, cloud-native security, and how attacks actually work.
DetectionCloud SecurityMalwareAutomation
What I do
I started boxing as a kid because I wanted to know how to protect myself. Later I worked in physical security — access, perimeter, control. The same question one level up: not my own body, but a building.
Then the threats moved online. No fence, no badge, no camera. I have worked in cyber security ever since.
Nowadays the perimeter changed, but the question has not changed: how do you tell that someone is inside, and how do you catch them the next time.
That is what I write about here!
The standard
A piece here should teach you a mechanism, not summarise an event. If you finish one knowing what happened but not how, it failed.