About

I have worked in cybersecurity since 2007: fifteen years in central government, then co-founding a purple teaming company, and now consulting and managing a SOC. My focus is threat intelligence, logging and monitoring, threat hunting, incident response and forensic readiness, plus threat modelling and architecture review. I write about what works on the blue side, and about what doesn’t.

Views are my own.

How I write #

The subjects, opinions and technical content are mine, and so is the responsibility for them. I use AI tools to help with drafting, structure, editing and formatting. I read and check what gets published. If you find a mistake, tell me.

Contact #