~/blog // field notes
blog.log
Notes from the work. Offensive security, ICS/OT, and threat intelligence, written the way I actually think about them.
2026.07.01 · threat intel
Teaching a model to read threat reports
Threat intelligence has a format problem. The useful detail lives in prose, but a SOC needs structure. Here is how I taught a language model to bridge that gap.
read →2026.05.20 · ICS/OT
ICS/OT is where security gets real
In operational technology a breach costs something physical, not just data. Why OT defends nothing like IT, why it is now a national security problem, and the talent gap behind it all.
read →