Research and practice
Writing.
Practical guides and archived notes on information security, research, and code.
An API authorization test matrix for tenant isolation
Cyber Kill Chain Analysis: Evidence, Gaps, and Defensive Opportunities
Intrusion Analysis: From Alert to Defensible Findings
A threat-model worksheet for a design review
A vulnerability triage checklist that records the decision
Tool Release: OSINTive
OSINT, aka know thy enemy.
Passwords, aka that thing people hate and try their hardest to mess up.