Blue Team of One
Security field notes
Deep teardowns and quick lessons from real defensive work by Ram Mudigina. Pick a vertical to dive in.
12 field notes
Identity & access
Detection & IR
eDiscovery & holds
Mail flow, deliverability, and the spam war in both directions.
Identity & Access
Tokens, Conditional Access, and proving who is really signing in.
Detection Engineering
Turning telemetry into signal — rule design, tuning, and correlation.
Cloud, Endpoint & IR
Hardening the estate and running the response when it matters.
Exchange Administration
Day-to-day Exchange Online operations — mailbox access, recovery, health, and the PowerShell that runs it all.
Legal, eDiscovery & Holds
Legal preservation and discovery — litigation holds, eDiscovery, content search, and the operational incidents that holds quietly cause downstream.