Clear Path Security
Tuning Sysmon configuration for high-fidelity process telemetry
Sysmon can be one of the most valuable sources of endpoint telemetry in a Windows environment, but[…]
Segmenting OT networks with the Purdue model and IEC 62443 zones
Operational technology (OT) segmentation is often discussed as if it were a single design choice, but in[…]
Vulnerability disclosure and patch management best practice for UK SMEs
Key takeaways Keep vulnerability disclosure and patch management in one joined-up process so reports are logged, assessed,[…]
Testing LLM applications for prompt injection with open-source tooling
Prompt injection testing is now a practical part of securing LLM applications, especially where a model can[…]
Designing least privilege access using IAM and RBAC
Least privilege is one of those security principles that sounds simple until you try to implement it[…]
Detecting Golden Ticket and Silver Ticket attacks in Kerberos logs
Kerberos remains one of the most important identity protocols in Windows environments, which is why forged ticket[…]
Secure SDLC principles explained for SaaS founders
Key takeaways Secure SDLC helps SaaS founders reduce breach risk, rework, and customer trust damage by building[…]
Detecting Cobalt Strike beacons with JA3 and JARM fingerprinting
JA3 fingerprints the client side of a TLS handshake and JARM fingerprints the server, so together they[…]
Secure design reviews and architecture checkpoints in the SDLC
Secure design reviews and architecture checkpoints in the SDLC For many UK SMEs, security work becomes most[…]
OSINT collection techniques using legitimate tools
Open source intelligence, usually shortened to OSINT, is the practice of collecting and analysing information that is[…]