Watching the Network You Built - Network Security Part 2
Part 2 puts the security in motion: services, the monitoring pipeline your log lines feed, wireless done currently, safe remote access, and where it all leads.
monitoring
Latest
Vaultwarden and HashiCorp Vault: Different Jobs in the Same Secrets Architecture
Yesterday I wrote about moving autonomous-agent secrets out of a flat .env file. Why I kept Vaultwarden for people and recovery, added HashiCorp Vault for workloads, and treated identity, audit, PKI, and tested recovery as part of the deployment rather than follow-up work.
The Map and the Floor
After years of working, teaching, writing in this field, the pattern I see most in newcomers is not lack of ability. It is freezing...
Practice at Home the Way You Preach at Work
I spend my working hours telling teams how to do security well. Segment the network. Write the change down. Model the threat before you build the control. Then I go home, and if I am honest with myself, the temptation is to cut every one of those corners because it is "just the lab."
Basics Series - #5 Firewall Configuration (OPNsense VM Configuration) Part 3
Welcome back to the Basics Series. In Basics Series - #3 we compared the firewall market, picked OPNsense for the lab, and installed it as a VM. In Basics Series - #4 we worked through the traditional vs. transparent-bridged decision and I promised a configuration walkthrough. This is that post...
Every Seat in the SOC: The Incident Response and Investigation Labs in the Cybersecurity Architect's Handbook, Second Edition
This installment does something different. Every domain we've covered so far — even the unglamorous hygiene loop — was, at bottom, an attempt to keep the bad day from arriving. This one starts the morning after it did...
The Unglamorous Loop That Decides Everything: Inside the Vulnerability and Configuration Management Labs
I've been working through the second edition of the Cybersecurity Architect's Handbook's "secret menu" one domain at a time...the controls that still mean something after everything else has fallen. This installment does something different...it looks down at the ground all of them are standing on.
The Source of Foreknowledge: Inside the Security Monitoring and Analytics Labs of the Cybersecurity Architect's Handbook
Every query a device makes is a statement of intent — what it wanted to reach, when, and how often — and once you're logging them, you're no longer just blocking bad names. You're watching behavior....
Two Books for the Price of One: The Cybersecurity Architect's Handbook, Second Edition — and the Capstone Lab That Builds an AI-Powered SOC
Alongside the printed edition, the book's associated GitHub repository holds over 700 more pages of supplementary content and hands-on labs...
books
·
You made It Possible - Coming Soon: Cybersecurity Architect's Handbook, Second Edition — Bigger, Bolder, and Battle-Tested
When the first edition of Cybersecurity Architect's Handbook: An End-to-End Guide to Implementing and Maintaining Robust Security Architecture hit shelves, the goal was ambitious but clear...
Ship Detections That Actually Work: A Hands-On Workshop for SOC Teams
If you've ever sat through a cybersecurity talk and thought, "Great framework, but how do I actually use this tomorrow?" — you're not alone. That frustration is exactly why Packt Publishing is sponsoring Powering Your SOC Team with AI Workshop: Real Incidents, Real Lessons exists.
