blog.log
Notes from the work. Offensive security, ICS/OT, and threat intelligence, written the way I actually think about them.
ThreatPulse asks one question: is this scary for us?
A few hundred security stories break every morning. ThreatPulse reads them all and answers the only question that matters to one company: is this scary for us?
read →Teaching a model to read threat reports
Threat intelligence has a format problem. The useful detail lives in prose, but a SOC needs structure. Here is how I taught a language model to bridge that gap.
read →ICS/OT is where security gets real
In operational technology a breach costs something physical, not just data. Why OT defends nothing like IT, why it is now a national security problem, and the talent gap behind it all.
read →