Understanding Red Team Evasion and Detecting It on the Defensive Side
This is not a how-to for attack steps; it is a guide to understanding red team evasion from the defensive side and building the visibility to detect it.
Blog
Penetration Testing
Guides, analysis and field notes on cyber security, software and technology.
Penetration Test Reporting: How to Explain Technical Findings to Leadership
A perfect pentest is worthless if it ends in a 180-page report nobody reads. Here's how to turn technical findings into language leadership can act on.
Designing Phishing Simulations for Organisations: The Most Effective Methods
Phishing tests that shame clickers don't build awareness; they erode trust. Here's a methodology that uses realistic scenarios, the right metrics and teaching feedback to make employees part of the defence.