Designing an internal kill-switch for lateral movement
A framework for modeling your own "circuit breakers" during high-risk incidents.
// Threat Intel Feed
Notes from incidents, drills & labs.
Essays, field reports and practical playbooks exploring how we think about adversaries, architecture and security UX.
Feed filters
Playbooks, intel briefs, red team notes
Sorted newest to oldest
Ransomware as a narrative, not a binary
Breaking down a simulated outbreak into human decisions and technical pivots.
What we log during an engagement (and why)
The traces that matter most for learning after a high-intensity test.
Page 1 of 3