Agentic | Field Notes
Introduction
Recently a few articles came across my timeline that broached the topic of how
agentic workloads impact telemetry ingestion.
In particular
Kofisec began to explore
how traditional detection controls and measurements might bre…
Entra Passkeys | Field notes
Introduction Recently I have noticed some discussion about Entra passkeys as a slightly less well explored authentication method abused by adversaries. Notably @NathanMcNulty will be hosting a talk on related topics at an Altered Security event here …
Proxmox and Adversaries
❗take the time to read the bottom of this page. Introduction
Proxmox is a virtualisation technology stack that is quickly becoming the go
to product solution for organisations looking to heal the wounds left by
Broadcoms acquisition of VM…
Goblin Diary #2 - AI Tools for Analysts 🐯
Dont Use AI Analyst work is built on the human capacity for creativity, memory recall and information gathering and using so called 'AI Tools' will actively diminish you in these areas. Your ability to form useful thoughts is built on the co…
Goblin Detection Diary #1 - Data is queen
Introduction Detection engineering underpins half of the entire cybersecurity industry but remains only ever softly spoken about or kept in some corner of the conference. So I've started this diary to capture the work I do in my roles and demonst…
Subscribe to:
Posts (Atom)
Popular
-
Introduction Tired of watching you and your friends get compromised, do exactly what's in this blog and start beating adversaries. Avoid... -
Introduction This document details how an analyst should conduct investigations and triage in the normal duties of their job. It will des...
-
Introduction This blog series will capture how to maximise the protection of an endpoint using the various technologies in the Defender su... -
Introduction Now that I have covered the advanced features obtained from Defender for Cloud and the complexities of Defender for Endpoint wi... -
Introduction Continuing on from my last post that captured using Defender for Cloud to gain powerful additional features on top of defender... -
Analysis In this post, I explain analysis and the associated techniques to mean at the lowest possible level a human’s ability to consume ...
-
Introductions How you as an analyst handle true positives is life and death in the eyes of potential victims. Traditionally the industry ele...
-
Introduction Making the leap to purchasing and maintaining an EDR solution can be huge for organisations so huge in fact that they never rea...
-
❗take the time to read the bottom of this page. Introduction Proxmox is a virtualisation technology stack that is quickly becoming the...
-
Introduction This post outlines a format for note-taking designed to aid analysts and ensure the knowledge they acquire over time is kep...
