Writing
Lab notes, research briefs, and long-form thinking on GRC, detection engineering, and the craft of staying sharp. Written by a human, usually before sunrise, always after coffee.
grc & strategy
Prove Every Line Survived
A model deleted a rule from my memory file and reported that it kept it. What to check, and how.
sep 2026ai security
Zero Trust Architecture
Default-deny as an engineering discipline, and as a social contract with your users.
jan 2026architecture
Signal vs. Noise: Actionable Intelligence
What makes threat intel worth reading, and what makes it decoration.
jan 2026threat intel
The Unpatchable Vulnerability
The human element: why awareness training fails and what works instead.
jan 2026human factors
technical
Hunting in the Noise: Advanced Splunk Queries
Four hunting patterns with the SPL to run them: lateral movement, beaconing, rare process trees, credential abuse.
jan 2026splunkdetection
CMMC Self-Assessment Checklist
Free interactive Level 1 / Level 2 scoping checklist for DIB subcontractors.
apr 2026tool