The Map and the Floor
After years of working, teaching, writing in this field, the pattern I see most in newcomers is not lack of ability. It is freezing...
infosec
Latest
Practice at Home the Way You Preach at Work
I spend my working hours telling teams how to do security well. Segment the network. Write the change down. Model the threat before you build the control. Then I go home, and if I am honest with myself, the temptation is to cut every one of those corners because it is "just the lab."
The Moment AI Stops Being a Tool: Why Autonomy Is the Risk Multiplier
A tool's failure is advisory because a human still reviews the output before anything happens. An agent's failure is operational because the bad output is the action...
ATT&CK
·
Basics Series - #5 Firewall Configuration (OPNsense VM Configuration) Part 3
Welcome back to the Basics Series. In Basics Series - #3 we compared the firewall market, picked OPNsense for the lab, and installed it as a VM. In Basics Series - #4 we worked through the traditional vs. transparent-bridged decision and I promised a configuration walkthrough. This is that post...
Amazon
·
Every Seat in the SOC: The Incident Response and Investigation Labs in the Cybersecurity Architect's Handbook, Second Edition
This installment does something different. Every domain we've covered so far — even the unglamorous hygiene loop — was, at bottom, an attempt to keep the bad day from arriving. This one starts the morning after it did...
Book
·
The Innermost Ring: Hands-On Identity and Encryption Labs from the Cybersecurity Architect's Handbook, Second Edition
Every control we design as architects ultimately serves one of two questions. Who is allowed to do what — and is the data still protected ... Access control answers the first. Data protection answers the second. Together they form the innermost ring of a defense-in-depth architecture...
Amazon
·
Many Calculations Before the Battle: Inside the Threat Modeling Labs of the Cybersecurity Architect's Handbook
In the last post I gave you the tour — the foundational labs, the eight operational categories...So let's start where the whole discipline starts: Category 1, Threat Modeling and Risk Assessment.
books
·
You made It Possible - Coming Soon: Cybersecurity Architect's Handbook, Second Edition — Bigger, Bolder, and Battle-Tested
When the first edition of Cybersecurity Architect's Handbook: An End-to-End Guide to Implementing and Maintaining Robust Security Architecture hit shelves, the goal was ambitious but clear...
Amazon
·
It continues to be a #1 and you can get an eBook copy during a sale that ends 01/20/2026!
I'm thrilled to share some exciting news with you! The Cybersecurity Architect's Handbook continues to hold its position as a #1 bestseller on Amazon...Here's even better news: Packt Publishing is running an incredible promotion right now! Just $9.99 through January 20, 2026.
Ship Detections That Actually Work: A Hands-On Workshop for SOC Teams
If you've ever sat through a cybersecurity talk and thought, "Great framework, but how do I actually use this tomorrow?" — you're not alone. That frustration is exactly why Packt Publishing is sponsoring Powering Your SOC Team with AI Workshop: Real Incidents, Real Lessons exists.
Amazon
·
Celebrating Continued Success: The Cybersecurity Architect's Handbook Remains a #1 Best Seller on Amazon
I'm thrilled to share that The Cybersecurity Architect's Handbook continues to dominate the cybersecurity literature space as a #1 best seller on Amazon!