Field notes from the enterprise.

X-Band Radar and the Silent Threat: Detecting Fiber Optic Controlled Drones Through Disturbance Pattern Analysis

After a week of deep research into X-band radar technology, I explore how these systems can detect even 'silent' fiber optic controlled drones by analyzing movement patterns and air disturbances.

Unlocking Global Internet Insights: A Deep Dive into Cloudflare Radar

Discover how Cloudflare Radar provides free access to global internet traffic patterns, security intelligence, and technology trends.

Taking Flight: My Journey Into FPV Drones with the Fixed Wing Mojito Build

A personal journey into the world of FPV drones, featuring my custom fixed-wing Mojito build and tips for getting started in this exciting hobby.

Securing Web Applications, the “Free” Way

This article will walk you through free tools to help secure your custom applications.

Navigating Cybersecurity with SBOMs: Lessons from Log4J and MOVEit Incidents

My latest article delves into how Software Bill of Materials (SBOMs) can play a pivotal role in enhancing organizational security, especially in light of the recent Log4J and MOVEit attacks.

Deepening Your Understanding of Incident Response Plans and Effective Tabletop Simulations

Explore the essentials of Incident Response (IR) in our blog, tailored for businesses and cybersecurity professionals. Learn about IR plan components, legal compliance, team diversity, and effective communication strategies. Gain practical insights on conducting and improving Incident Response Tabletop Simulations. A vital read for enhancing your organization's cybersecurity preparedness and response capabilities.

Attack Surface Reduction in Cybersecurity: A Proactive Approach to Enhance Digital Safety

Explore Attack Surface Reduction (ASR) in cybersecurity. Learn its importance, practical strategies for businesses, and ways to mitigate common vulnerabilities for enhanced digital security. A must-read for anyone keen on proactive cyber defense.

Privileged Identity Management

This blog is about the benefits of PIM and how it can enable you to secure your organization's privileged roles.

Azure Software Development using Logic Apps and Azure Tables

Create an Instagram Data Aggregator using Azure and the Meta API that can be called and sorted without data sprawl.

The Human Aspect of Cybersecurity: Beyond the Technical Controls

This article highlights the importance of training your employees about potential threats and good tips to prevent you from falling victim to a social engineering attack.

The Imperative of Securing DNS Records: Safeguarding Your Organization from Threats

IoT Security: The Increasing Importance in 2023

What We Can Learn from SpaceX’s Supplier Schematics Leak

Let’s talk about how creating an SCRM program can further secure your business and protect the Intellectual Property of your business. I also add some tips to consider when creating your SCRM.

The Impact of Cybercrime on Small Businesses

Why approaching cybersecurity should be a core part of every business regardless of the industry

Best Practices for Creating Strong Passwords

Why forcing frequent password resets is not a good practice and the risks that come with this activity

The Importance of Cybersecurity Awareness and Education

Cybersecurity awareness and education are crucial in protecting individuals, businesses and organizations against the increasing number of cyber attacks.

Defense-in-Depth and Conditional Access

Blog talks about conditional access and how it provides defense-in-depth.

Azure App Proxy Reduces VPN Need

I eliminated the need for a Fortune 500 to use VPN to access internal apps securely using Azure App Proxy and Conditional Access

Microsoft 365 Power Automate

Reduce overhead and follow up by automating tasks from your internal applications.

Shopify Liquid Development

I designed and modified the template for a customers Shopify e-comemrce website using shopify's liquid based on ruby-on-rails.

What Should an Annual Security Evaluation Entail?

Example of what should be involved in a annual security assessment.