Blue Team of One
Security field notes
Deep teardowns and quick lessons from real defensive work. Pick a vertical to dive in.
Mail flow, deliverability, and the spam war in both directions.
Identity & Access
Tokens, Conditional Access, and proving who is really signing in.
Detection Engineering
Turning telemetry into signal — rule design, tuning, and correlation.
Cloud, Endpoint & IR
Hardening the estate and running the response when it matters.
Exchange Administration
Day-to-day Exchange Online operations — mailbox access, recovery, health, and the PowerShell that runs it all.
Legal, eDiscovery & Holds
Legal preservation and discovery — litigation holds, eDiscovery, content search, and the operational incidents that holds quietly cause downstream.