Daily Blog #775: An Azure log entry to look for when a threat actor is in

 Hello Reader, One of the trends I've been noticing when a threat actor first gets into Azure or Microsoft 365 accounts is they will immediately look...

Read More

Daily Blog #774: Forensic Lunch Test Kitchen 3/11/25

 Hello Reader,Tonight Evan and I were 'vibe debugging', trying to get the models to fix their own code. We were successfully able to get it to fix issues...

Read More

Daily Blog #773: Sandpiper Trade Secrets and Cyber Dallas 2025

 Hello Reader,Just an announcement that I'll be moderating a panel on legal cybersecurity issues on March 26, 2025. I'll be joined by my colleague Jonathan...

Read More

Daily Blog #772: Sunday Funday 3/9/25

 Hello Reader,It's Sunday! This week's challenge is vibing. If you haven't heard about 'vibe coding' it's what Evan and I have been doing in our streams,...

Read More

Daily Blog #771: Solution Saturday 3/8/25

 Hello Reader, This week Phill Moore has brought us the winning answer but as his conversation on X showed it was an answer that could have had additional...

Read More

Daily Blog #770: Forensic Lunch Test Kitchen 3/7/25

 Hello Reader, Tonight Evan and I took an express train to the coast and brought a Jimmy Buffet inspired web interface to Margarita shotgun with one...

Read More

Daily Blog #769: Forensic Lunch Test Kitchen

 Hello Reader, Tonight Evan and I used Cursor with the Clause 3.7 model to bring back to life the popular tool Margarita Shotgun ( GitHub - ThreatResponse/margaritashotgun:...

Read More

Daily Blog #768: HTCIA Boston April 8, 2025

 Hello Reader,I'll be at the HTCIA Boston meeting on April 8, 2025 along with my colleagues Adam Hart, Kaya Overholzer speaking on some fun topics.  Adam...

Read More