Preamble I keep hearing the term observability thrown around a lot, often used in the wrong context. Working in Cybersecurity, I think people often confuse the idea of observability with blue team...

Cloud technologies move fast, none more so than AWS EKS. I’m not in the business of managing clusters full-time - even via managed services like EKS. I recently revisited the technology and found i...

I recently stumbled across this article from October 2023, which demonstrates an idea of using AWS’s Bottlerocket in your EKS cluster with images already pulled to an EBS snapshot, which is added t...

This post is a writeup of an interesting quirk that I found when playing around with Microsoft Azure Virtual Machines and joining AzureAD domains. I raised the findings with Microsoft Security Res...

This post is a writeup of some interesting goofiness that I found when playing around with Microsoft Sentinel Log Poisoning. I’ve not updated this blog in years, but hopefully this absolute monster...

I have recently been awarded CEng status from the UK Engineering Council through the international Institution of Engineering & Technology (IET). CEng status is something I’ve been working towa...

I recently passed the AWS Certified Solutions Architect Associate certification and thought i’d share my experience. I’ve been using AWS for about 18 months and have a strong background with cloud...

I have just passed my CCSP examination (3rd September 2022). It took me around 3 hours to complete the 150 questions. I found the exam pretty technical, which suited me well. I found that especial...

Here is a non-exhaustive list of some cloud security related standards which are worth memorising. Standard Overview ISO 28000 Specification of Sec...

Most technology professionals will stumble across networking at some point. The minefield of subnetworks, CIDRs, broadcast addresses, network addresses and subnets can be overwhelming, but most peo...