Blog
Insights
Patterns from 25 years of security leadership, offensive operations, and building things that work.
AI & Automation
Footprints in the Snow: IOC Table
Indicators of compromise from a snowshoe phishing campaign: sending infrastructure, email kit signatures, TDS domains, and scam kit artifacts.
AI & Automation
Footprints in the Snow
248 AI-generated phishing emails hit my inbox in five days. SpamAssassin caught 5%. We mapped the operation from a leaked LLM prompt to three continents.
AI & Automation
The Fault, Dear Brutus
Everyone's debating what AI means for the future. The more interesting story is what it means for a person with a problem to solve right now.
AI & Automation
The Systems Thinker's Edge: Why AI Needs Architecture, Not Code
Building production AI systems without writing code. A Field CISO's take on why architecture beats syntax.