Geolocation via Pipelines in Graylog
To the delight of most Graylog users, geolocation is automatically built into the platform via the...
Geolocation via Pipelines in Graylog
Securing G Suite
Shortly after publishing Part 1 of my G Suite DFIR blog series, I gave a talk on the topic at...
US-CERT TA18-106A for the Rest of Us!
EXECUTIVE SUMMARY US-CERT posted a new Tactical Alert (TA18-106A) based on a combined intelligence...
Meltdown and Spectre
SUMMARY A collaboration between multiple security industry and academic researchers led to the...
Build a Free Private Mesh Network for Secure DevOps
Over time and for various reasons, I've amassed quite the catalog of cloud-hosted servers. This has...
Auditing G Suite Login Activity
Often times during incident response activities, the responder is overwhelmed with data. The need...
When Browser Extensions Go Rogue
So it's a random Wednesday night and I'm studying for my GIAC GCFE exam (which I just passed...
Slacking at Security Operations
Running a Security Operations Center requires fighting a constant battle to increase analyst...
Macro Security for Enterprise Defenders
In my experience, one of those most prevalent and common threats to today’s enterprise networks...