Advanced Threat Protection by Microsoft
I just wanted to throw together a quick post explaining the differences between the "Advanced Threat Protection" solutions from Microsoft. These different offerings sometimes confuse me, »
Azure Flow Log Aggregation (SOF-ELK)
I recently completed the SANS FOR572 | Advance Network Forensics: Threat Hunting, Analysis, and Incident Response course delivered by Phil Hagen and the tested and certified in »
Automated Azure Cyber Lab
I just wrapped up an Azure Government Hack-a-thon, where our team had to come up with a solution based on five different scenario choices. Now this »
Red Team Rookie
This year's Vigilant Guard for the State of Maryland had a cyber security component that comprised of joint Army and Air National Guard, Civilian, Government and »
Locked Shields 2017
Recently I participated in Locked Shields, considered one of the biggest live-fire cyber defense exercises in the world. This was my second year being part of »