MITRE Coverage Beyond the Green Matrix
Why technique heatmaps lie about detection coverage, and how to fix the loop.
Graft 2: The AI Engineering Workflow
How I built Graft using Gemini and disciplined AI workflows.
Graft 1: Detection-as-Code, Implemented
Engineering decisions behind Graft, a Detection-as-Code platform.
The Web Request Storm Incident
A missing 404 page turned my blog into an infinite website.
Prepare Your SOC for AI
The readiness work that makes AI pay off in a SOC.
Review: Practical AI Security
A hands-on guide to securing modern AI systems.
Lantana 3: Output and Lessons
The engineering and AI lessons from building Lantana.
Log Health Monitoring
Monitoring log ingestion in SIEM using static and dynamic methods.
Burn After Writing
Why I built an LLM honeypot and destroyed it.
Patchbay: Engineering with AI
Building a Spotify MCP server with an AI pair.
Lantana 2: The Data Pipeline
Building Lantana's data pipeline and first end-to-end deployment.
Lantana 1: Honeypot as Code
Engineering decisions behind Lantana, a Honeypot as Code platform.
Adversary Engagement 101
A primer on cyber deception and adversary engagement.
Pragmatic Adversary Engagement Framework
A pragmatic framework for running Adversary Engagement programs.
Review: Intrusion Detection Honeypots
Detection through deception made simple.
