Unlocking Next-Gen Kubernetes Security with eBPF tooling and Microsoft Sentinel This post explores the setup and configuration of Cilium and Tetragon in Azure Kubernetes Service and integrating &am...

Google Cloud - Managing Google’s Unverified Authentication Library In Google Cloud, Application Default Credentials (ADC) allows your code/applications to automatically find and use credentials. F...

TL;DR Observable systems can support a security function but are distinctly different. Buzzword cloud “observability” tooling typically only covers either VMs or Linux-based systems such as Ku...

Preamble I keep hearing the term observability thrown around a lot, often used in the wrong context. Working in Cybersecurity, I think people often confuse the idea of observability with blue team...

Cloud technologies move fast, none more so than AWS EKS. I’m not in the business of managing clusters full-time - even via managed services like EKS. I recently revisited the technology and found i...

I recently stumbled across this article from October 2023, which demonstrates an idea of using AWS’s Bottlerocket in your EKS cluster with images already pulled to an EBS snapshot, which is added t...

This post is a writeup of an interesting quirk that I found when playing around with Microsoft Azure Virtual Machines and joining AzureAD domains. I raised the findings with Microsoft Security Res...

This post is a writeup of some interesting goofiness that I found when playing around with Microsoft Sentinel Log Poisoning. I’ve not updated this blog in years, but hopefully this absolute monster...

I have recently been awarded CEng status from the UK Engineering Council through the international Institution of Engineering & Technology (IET). CEng status is something I’ve been working towa...

I recently passed the AWS Certified Solutions Architect Associate certification and thought i’d share my experience. I’ve been using AWS for about 18 months and have a strong background with cloud...