Posts in Security

Introducing Threats Manager Studio with Simone Curzi

I co-hosted OWASP DevSlop with Nikki, Nancy, Faith, Isaiah, Rahul and spoke to Simone Curzi, Principal Consultant from Microsoft Consulting Services about his new tool Threats Manager Studio (TMS).

Read more ...


Creating a Honeytoken User in Office 365

As part of my current project to harden Office 365, I have proposed to my partner in “Don’t Do” Crimes that we should conduct some phishing and other fun little war games to work out how we can implement some more proactive security controls Spy vs. Spy style.

Read more ...


Part I: Agloe, what the map makers-of the 1930s can teach us about protecting data in 2018

Throughout 2018, I presented a conference talk entitled “Agloe: What the map makers-of the 1930s can teach us about protecting data in 2018” where we looked back to the 1930’s to see what the General Drafting Company could teach us about securing data and breach notification in the modern day. In the talk I discussed how using free and open-source solutions, defensive thinking and a bit of creativity, we can easily identify network breaches, and catch the bad guys in the act.

Read more ...