$ ls ~/research
Research
Areas I'm studying and writing about, with the notes and tools that came out of them.
/detection
Threat detection
Detection rules mapped to MITRE ATT&CK and reducing false positives in SIEM alerting.
sign-in triage →/appsec
Application security
Practical OWASP Top 10 coverage and security checks in CI pipelines.
owasp for small teams →/privacy
Browser privacy
How fingerprinting works and how much a browser reveals by default.
footprint scanner →/grc
Governance & cloud security
ISO/IEC 27001 and NIST CSF controls applied to cloud IAM and logging.
skills →