Consulting Research
I have led information security consulting practices with the goal of assisting clients with demanding security projects and growing the breadth and depth of the services my team could offer.
Metasploit Framework is a powerful open source tool for penetration testing. Whether you're looking to use it for work or...Read more
If you've been working in information security—or IT in general—for a while, you might consider yourself an expert in...Read more
When handling a large-scale intrusion, incident responders often struggle with obtaining and organizing the intelligence...Read more
Agreeing on the scope of a security assessment, such as a penetration test, is easier said than done. Define the scope too...Read more
There are many reasons why business managers seem to ignore the risks brought forth by information security professionals. I...Read more
This cheat sheet offers communication and collaboration tips for technologists, engineers, and information workers. To...Read more
This cheat sheet offers tips for planning, issuing and reviewing Request for Proposal (RFP) documents for information...Read more
This cheat sheet presents recommendations for creating a strong report as part of an information security assessment...Read more
There are several reasons why information security recommendations are ignored. When I outlined the rationale for this...Read more
Text-sharing “pastebin” sites, such as Pastebin and Pastie are a popular repository of compromised data. Keeping an eye...Read more