MITRE Coverage Beyond the Green Matrix
Why technique heatmaps lie about detection coverage, and how to fix the loop.
Graft 2: The AI Engineering Workflow
How I built Graft using Gemini and disciplined AI workflows.
Graft 1: Detection-as-Code, Implemented
Engineering decisions behind Graft, a Detection-as-Code platform.
The Web Request Storm Incident
A missing 404 page turned my blog into an infinite website.
Prepare Your SOC for AI
The readiness work that makes AI pay off in a SOC.
Review: Practical AI Security
A hands-on guide to securing modern AI systems.
Lantana 3: Output and Lessons
The engineering and AI lessons from building Lantana.
Log Health Monitoring
Monitoring log ingestion in SIEM using static and dynamic methods.
Burn After Writing
Why I built an LLM honeypot and destroyed it.
Patchbay: Engineering with AI
Building a Spotify MCP server with an AI pair.
Lantana 2: The Data Pipeline
Building Lantana's data pipeline and first end-to-end deployment.
Lantana 1: Honeypot as Code
Engineering decisions behind Lantana, a Honeypot as Code platform.
SOAR Playbooks Aren't Scripts
Treating SOAR playbooks as pipelines, not scripts.
Going YOLO With Claude Code
Two days of full-permission Claude Code, and a close call.
AI-First Software Development
Transitioning from ad-hoc scripting to an AI-first development workflow.
