Remote Access Done Right
Do you have resources on prem? In the cloud? How about in multiple clouds? How do you access them...
Remote Access Done Right
A SecDevOps Perspective on SUNBURST
Much has already been said about the recently reported SolarWinds compromise. In this post, we are...
Securing Your Velociraptor Deployment
Our team are huge fans of Velociraptor. It's an incredibly powerful tool, for both DFIR and...
Integrating Graylog With TheHive
If you couldn't tell by now, we love Graylog. We may have mentioned them a time or two :)
Graylog and Cylance Protect Integration
TL;DR - we needed to ingest multiple sources of Cylance logs into Graylog, and this is how we did...
Brokering Other Cloud Resources Behind AWS Services
I tweeted this the other day, and had a lot of folks reach out asking for more details/a diagram of...
Automating Graylog Pipelines
Part of our job at Recon relies on fine tuning our threat signatures that make up the bulk of our...
Locking down ZeroTier peer-to-peer networks
In a previous post, we shared our affinity for ZeroTier:
The Infrastructure
When I joined the OpenSOC team at the beginning of this year, everything resided on 3 Intel Skull...
Build a Free Private Mesh Network for Secure DevOps
Over time and for various reasons, I've amassed quite the catalog of cloud-hosted servers. This has...