Blue Team of One
Security field notes
Deep teardowns and quick lessons from real defensive work. Pick a vertical to dive in.
Mail flow, deliverability, and the spam war in both directions.
Identity & Access
Tokens, Conditional Access, and proving who is really signing in.
Detection Engineering
Turning telemetry into signal — rule design, tuning, and correlation.
Cloud, Endpoint & IR
Hardening the estate and running the response when it matters.