Published notes on information security, research, and code by Brandon Eckert.https://www.brandoneckert.com/https://www.brandoneckert.com/api-authorization-test-matrix/https://www.brandoneckert.com/api-authorization-test-matrix/A reusable JSON matrix with 21 fictional cases covering tenant boundaries, roles, invoice operations, exports, and revoked membership.Sat, 17 Oct 2026 00:00:00 GMTProduct SecurityBrandon Eckerthttps://www.brandoneckert.com/cyber-kill-chain-analysis/https://www.brandoneckert.com/cyber-kill-chain-analysis/Apply the seven Cyber Kill Chain stages to a fictional hybrid incident, with a 14-sheet Excel workbook and a complete defensive opportunity matrix.Sat, 17 Oct 2026 00:00:00 GMTBest PracticesBrandon Eckerthttps://www.brandoneckert.com/intrusion-analysis/https://www.brandoneckert.com/intrusion-analysis/A practical investigation method, a 15-sheet Excel workbook, and a fictional hybrid incident with traceable identity, Windows, network, and cloud evidence.Sat, 17 Oct 2026 00:00:00 GMTBest PracticesBrandon Eckerthttps://www.brandoneckert.com/threat-model-worksheet/https://www.brandoneckert.com/threat-model-worksheet/A reusable worksheet and fictional SaaS example for recording trust boundaries, threats, decisions, owners, and verification work.Sat, 17 Oct 2026 00:00:00 GMTProduct SecurityBrandon Eckerthttps://www.brandoneckert.com/vulnerability-triage-checklist/https://www.brandoneckert.com/vulnerability-triage-checklist/A reusable checklist and fictional finding for separating severity from priority, documenting evidence and uncertainty, and defining remediation and retest work.Sat, 17 Oct 2026 00:00:00 GMTProduct SecurityBrandon Eckerthttps://www.brandoneckert.com/tool-release-osintive/https://www.brandoneckert.com/tool-release-osintive/An introduction to OSINTive, my command-line OSINT project, its data sources, export options, and early web application.Sat, 28 Dec 2019 00:00:00 GMTBlogBrandon Eckerthttps://www.brandoneckert.com/osint-aka-know-thy-enemy/https://www.brandoneckert.com/osint-aka-know-thy-enemy/How publicly shared details can connect an online identity, with a walkthrough of open source intelligence and common research sources.Mon, 30 Jan 2017 00:00:00 GMTBlogBrandon Eckerthttps://www.brandoneckert.com/passwords-how-not-to-mess-up/https://www.brandoneckert.com/passwords-how-not-to-mess-up/Why predictable passwords and password reuse put accounts at risk, and how password managers and a second authentication factor can help.Wed, 25 Jan 2017 00:00:00 GMTBest PracticesBlogBrandon Eckert