The Map and the Floor
After years of working, teaching, writing in this field, the pattern I see most in newcomers is not lack of ability. It is freezing...
security
Latest
Practice at Home the Way You Preach at Work
I spend my working hours telling teams how to do security well. Segment the network. Write the change down. Model the threat before you build the control. Then I go home, and if I am honest with myself, the temptation is to cut every one of those corners because it is "just the lab."
Basics Series - #5 Firewall Configuration (OPNsense VM Configuration) Part 3
Welcome back to the Basics Series. In Basics Series - #3 we compared the firewall market, picked OPNsense for the lab, and installed it as a VM. In Basics Series - #4 we worked through the traditional vs. transparent-bridged decision and I promised a configuration walkthrough. This is that post...
The Outermost Ring: Enterprise and Cloud Security — and the End of the Series
This installment goes in a different direction. Where the last post zoomed all the way in — past the running host, past the alert, down to a single line of source...stepping away from individual controls entirely and asks about the distributed, multi-platform enterprise the cloud produced.
Every Seat in the SOC: The Incident Response and Investigation Labs in the Cybersecurity Architect's Handbook, Second Edition
This installment does something different. Every domain we've covered so far — even the unglamorous hygiene loop — was, at bottom, an attempt to keep the bad day from arriving. This one starts the morning after it did...
The Innermost Ring: Hands-On Identity and Encryption Labs from the Cybersecurity Architect's Handbook, Second Edition
Every control we design as architects ultimately serves one of two questions. Who is allowed to do what — and is the data still protected ... Access control answers the first. Data protection answers the second. Together they form the innermost ring of a defense-in-depth architecture...
Many Calculations Before the Battle: Inside the Threat Modeling Labs of the Cybersecurity Architect's Handbook
In the last post I gave you the tour — the foundational labs, the eight operational categories...So let's start where the whole discipline starts: Category 1, Threat Modeling and Risk Assessment.
Foundations Before Firepower: The Full Lab Curriculum Behind the Cybersecurity Architect's Handbook, Second Edition
In the last post, I jumped straight to the top of the spire — the AI Security Automation capstone. But a capstone, by definition, sits on top of something. You can't appreciate the spire if you've never seen the cathedral....
Two Books for the Price of One: The Cybersecurity Architect's Handbook, Second Edition — and the Capstone Lab That Builds an AI-Powered SOC
Alongside the printed edition, the book's associated GitHub repository holds over 700 more pages of supplementary content and hands-on labs...
Amazon
·
"The Desktop Reference I've Been Missing": A Reader on the Cybersecurity Architect's Handbook
Every author hopes their work lands the way they intended it to. With a technical book, that hope carries a particular weight, because the goal ...
AI
·
Found in the Wild!
I'm thrilled to share that the second edition of the Cybersecurity Architect's Handbook is officially out in the world.
Amazon
·
The Physical Book on Amazon.com
The Physical Book on Amazon.com...To top it off, it is already a #1 New Release...