My Writing

I write about security leadership and technology, sharing strategies, practical frameworks, and field notes. My goal is to capture what I've learned and contribute to conversations in our community.

• Deception Is Cyber Deception a Must-Have This Time?
  Cyber deception is drawing renewed interest in the AI era, but it may not become mainstream this time either. Teams can still add decoys to identity, segmentation, secrets, and AI agent projects that...
• Malware Analysis How to Install SIFT Workstation and REMnux on the Same System
  REMnux and SIFT Workstation together make a powerful toolkit for malware analysis, digital forensics, and incident response. Here's how to combine them into a unified super-toolkit.
• Malware Analysis Designing a Malware Analysis Lab With REMnux
  Two VMs on a host-only network and one allowlisted path out let a sample run while an AI agent helps. The two decisions that matter most are where the agent runs and what it may reach.
• Malware Analysis AI-Assisted Malware Analysis Tips
  An AI agent can amplify a malware analyst's skills, but the analyst must direct it and verify its findings. These tips cover how to split the work, set up a contained lab, delegate tasks, and...
• Artificial Intelligence My Favorite Findings From the AI Security Decisions Report
  Over 300 security professionals told Sounil Yu and me how their organizations secure AI. We published what we learned as the AI Security Decisions Report, so you can compare your AI security...
• Fun Brooklyn History: The Mystery of Club 338