Field notes
Blog
What we found, what it cost to find, and what we would do differently. Written by the people who did the work.
-
How to scope an engagement without wasting the first week
Two things to bring to the first call. Everything else can be worked out on it.
Read -
Detection engineering is the half of the job nobody buys
Nobody buys the defensive half. It is the half that would change next year.
Read -
The ninety-day retest is the only number that matters
Finding counts measure how hard we looked. The retest measures whether anything changed.
Read -
Why your scanner said clean and we did not
Three findings that are nothing on their own, and an account takeover when you chain them.
Read -
What a modern phishing kit actually costs to run
The infrastructure is the cheap part. The expensive part is patience, and no control prices that.
Read -
The service account nobody could name
Four hundred service accounts, three hundred and ninety-one documented. The nine that were not are the whole finding.
Read
