nick@jax:~$ ls ~/writing –sort=date
Writing_
Lab notes, research briefs, and long-form thinking on GRC, detection engineering, and the craft of staying sharp. Written by a human, usually before sunrise, always after coffee.
grc & strategy
Prove Every Line Survived
A model deleted a rule from my memory file and reported that it kept it. What to check, and how.
GRC Battle Plan: the CMMC / C3PAO Niche
Market analysis and positioning for a readiness practice serving DIB subcontractors.
Zero Trust Architecture
Default-deny as an engineering discipline, and as a social contract with your users.
Signal vs. Noise: Actionable Intelligence
What makes threat intel worth reading, and what makes it decoration.
The Unpatchable Vulnerability
The human element: why awareness training fails and what works instead.
technical
Hunting in the Noise: Advanced Splunk Queries
Four hunting patterns with the SPL to run them: lateral movement, beaconing, rare process trees, credential abuse.
CMMC Self-Assessment Checklist
Free interactive Level 1 / Level 2 scoping checklist for DIB subcontractors.