Learning From A Year of Security Breaches

This year (2016) I accepted as much incident response work as I could. I spent about…

Lessons Learned in Detection Engineering

What I’ve learned from “good” intrusion detection programs.

Every security program eventually gains the ability to “detect” bad things happening on their systems. This creates the burden of…

Investigating CloudTrail Logs

These nightmares are typical in an AWS breach. Would you know how to investigate them?

Red Teams

You’ve spent millions on security products that aren’t escalating incidents. You have a 24/7…

A blameless post-mortem of USA v. Joseph Sullivan

An Information Security Policy for the Startup

Welcome to the company! We’re here to change the world! Before we start moving fast, we need to make sure you don’t cause a massive security incident and flat line the company’s productivity for a few days.

Starting Up Security

Your startup is growing fast. Your customers are starting to ask tough security…

Building a Product Security Team

Your company writes software. When does it make sense to build a Product Security team? What types of…

An Incident Response Plan for Startups

At some point your company will have to deal with a security incident. Let’s write an incident response plan that will help organize the chaos of incident response ahead of time.