>_PJ

Blog

Writing

Longer-form personal writing, published outside of official Microsoft channels.

BlogMedium· 2023-09-20

Leveraging Honeypots for Enhanced Cybersecurity: A Quick Overview

How deception technology and honeypots can surface attacker activity early, generate high-signal detections, and enrich threat intelligence.

Threat HuntingThreat Intelligence
BlogMedium· 2023-08-12

How to Use Cloud Audit Logging for Threat Hunting in GCP

A practical walkthrough of using Google Cloud audit logs to hunt for suspicious activity and build cloud-native detections in GCP environments.

Cloud SecurityThreat Hunting
BlogMedium· 2023-08-07

DGA Domain Detection with Shannon Entropy Analysis

Using Shannon entropy to flag algorithmically generated (DGA) domains and turn the technique into a repeatable detection for C2 infrastructure.

Detection EngineeringThreat Hunting
BlogMedium· 2023-07-31

Tails vs. Qubes OS vs. Whonix: Choosing the Right Privacy-Focused OS

A comparison of Tails, Qubes OS, and Whonix across isolation, anonymity, and threat models to help pick the right privacy-focused operating system.

Privacy & Anonymity
BlogMedium· 2023-06-23

The Power of Correlation: Strengthening Security with DLP and Threat Hunting in Splunk

Correlating DLP signals with threat-hunting queries in Splunk to catch data exfiltration that either source would miss on its own.

Threat HuntingDetection EngineeringThreat Intelligence
BlogMedium· 2023-06-11

Unleashing the Power of Threat Hunting and Threat Intelligence

A foundational guide to threat hunting and threat intelligence — how they reinforce each other and a path for getting started in the field.

Threat HuntingThreat Intelligence

Auto-synced

New Medium posts appear here automatically each week.