The Terminal Is a Conversation
My first Linux distribution no longer exists. I mention that because it lands two points at once: Linux is old enough to have history, and the skills transfer anyway...
Technology
Latest
The 45Drives Professional Pro15: Storage You Actually Own
Most of the storage I have bought across my career came from a few of the usual vendors, and most of it worked. It also came with things I could not source elsewhere, firmware that refused drives and software layer I paid for every year whether I used it or not. The Pro15 is a different animal...
Practice at Home the Way You Preach at Work
I spend my working hours telling teams how to do security well. Segment the network. Write the change down. Model the threat before you build the control. Then I go home, and if I am honest with myself, the temptation is to cut every one of those corners because it is "just the lab."
Basics Series - #5 Firewall Configuration (OPNsense VM Configuration) Part 3
Welcome back to the Basics Series. In Basics Series - #3 we compared the firewall market, picked OPNsense for the lab, and installed it as a VM. In Basics Series - #4 we worked through the traditional vs. transparent-bridged decision and I promised a configuration walkthrough. This is that post...
Every Seat in the SOC: The Incident Response and Investigation Labs in the Cybersecurity Architect's Handbook, Second Edition
This installment does something different. Every domain we've covered so far — even the unglamorous hygiene loop — was, at bottom, an attempt to keep the bad day from arriving. This one starts the morning after it did...
The Unglamorous Loop That Decides Everything: Inside the Vulnerability and Configuration Management Labs
I've been working through the second edition of the Cybersecurity Architect's Handbook's "secret menu" one domain at a time...the controls that still mean something after everything else has fallen. This installment does something different...it looks down at the ground all of them are standing on.
The Innermost Ring: Hands-On Identity and Encryption Labs from the Cybersecurity Architect's Handbook, Second Edition
Every control we design as architects ultimately serves one of two questions. Who is allowed to do what — and is the data still protected ... Access control answers the first. Data protection answers the second. Together they form the innermost ring of a defense-in-depth architecture...
The Source of Foreknowledge: Inside the Security Monitoring and Analytics Labs of the Cybersecurity Architect's Handbook
Every query a device makes is a statement of intent — what it wanted to reach, when, and how often — and once you're logging them, you're no longer just blocking bad names. You're watching behavior....
Many Calculations Before the Battle: Inside the Threat Modeling Labs of the Cybersecurity Architect's Handbook
In the last post I gave you the tour — the foundational labs, the eight operational categories...So let's start where the whole discipline starts: Category 1, Threat Modeling and Risk Assessment.
Foundations Before Firepower: The Full Lab Curriculum Behind the Cybersecurity Architect's Handbook, Second Edition
In the last post, I jumped straight to the top of the spire — the AI Security Automation capstone. But a capstone, by definition, sits on top of something. You can't appreciate the spire if you've never seen the cathedral....
Two Books for the Price of One: The Cybersecurity Architect's Handbook, Second Edition — and the Capstone Lab That Builds an AI-Powered SOC
Alongside the printed edition, the book's associated GitHub repository holds over 700 more pages of supplementary content and hands-on labs...
Amazon
·
Five Winners, One Mission: Celebrating Community at GDG DFW
While I wasn't able to attend in person this time, the fantastic Google Developer Group DFW gathering turned out to be a real celebration. Even from a distance, it was a great reminder of why these events matter...