Security Operations
Most SOCs Are Thinking About AI the Wrong Way
The real AI opportunity in the SOC isn't faster triage — it's codifying your best analysts' expertise so it can be applied at scale. Part 1 of a series.
Recent Posts
Incident Response
The Power of Hypothesis Driven Investigations
Why structured hypotheses, not more tooling, are what turns SOC alert-chasing into evidence-based investigation.
Incident Response
The Most Important Question Every SOC Analyst Should Be Asking
The one question — 'so what?' — that separates analysts closing alerts fast from analysts actually reducing risk.
Zero Trust Architecture
Defending the Edge: How VPNs, Firewalls & Routers Are Now Prime Targets
Why VPNs, firewalls, and edge devices have become the preferred entry point for ransomware and nation-state actors — and what to actually monitor for.
Phishing
Use of Bespoke Branding in O365 Phishing Campaigns
How phishing kits abuse Microsoft 365's public branding APIs to clone an organisation's real sign-in page convincingly.