Blue Team of One
practitioner field notes · defensive security

Real defensive work,
written honestly.

27
Field notes
09
Verticals
100%
From real work
PS BlueTeam:\> Get-Vertical | Format-Table -Auto// pick a drawer
PS BlueTeam:\> Get-FieldNote -Newest 4// latest, newest first
FN-027 · PSA privileged-access reporter: who holds admin, and is it standing or JIT?✓ Aug 2026 FN-026 · IDNTemporary Access Pass is a loaded gun: using it without shooting yourself✓ Aug 2026 FN-025 · IDNKilling standing admin: tiered privileged access with PIM✓ Aug 2026 FN-024 · EDRWindows Hello for Business via Intune: the two paths, and picking the right one✓ Aug 2026