- Maintaining a detection catalog in the LLM era
- Using coding harnesses to streamline detection engineering
- How to get your idiot LLM to write better queries
- Building Cloud Control-Plane Detections with Chokepoints
- The Building Blocks of Cloud Identity Detections Pt. 2
- The Building Blocks of Cloud Identity Detections Pt. 1
- Understanding Adversary-in-the-Middle (AiTM) Phishing as a SOC Analyst
