Post going over what Cloudflare's logging pipeline looks like, how they achieve high availability, and how they meet their Service Level Objectives (SLOs) while shipping close to a million log lines per second.   #monitor

Two attacks in an AWS environment that led to crypto mining and data exfiltration.   #attack   #aws

Azure Monitor Activity Logs can be difficult to interpret. This blog offers insights into these logs where you'll find an invaluable reference tool and guide designed to demystify Azure's logging complexities.   #azure   #monitor

Post demonstrating why Okta's SWA isn't the same or as secure as using SAML and OIDC authentication methods for SSO.   #explain   #saas

A succinct and structured mind map that could act like a checklist when onboarding new AWS Accounts to an existing AWS Organization.   #aws   #defend

Post exploring the main types of attacks in the supply chain, as well as providing preventive and mitigation measures against them.   #attack   #defend   #supply-chain

Create a test Certificate Authority, configure AWS IAM Roles Anywhere and test access to AWS authenticating with a certificate in MacOS Keychain.   #aws   #build

Config Syncer keeps ConfigMaps and Secrets synchronized across namespaces and/or clusters.

Interactive debugger for Dockerfile, with support for IDEs (VS Code, Emacs, Neovim, etc.).

Integrates Spiffe and Vault to have secretless authentication. You might also want to check out the companion blog post.

Simple Command Line Tool to Enumerate Slack Workspace Names from Slack Webhook URLs. You can also refer to the companion blog post.

A visual lifeline designed to equip you with the crucial steps and resources needed to navigate a GCP security incident.