visitor@thefish.nz:~$ posts

Posts

43 posts

CIS, NIST, ISO 27001 and NZISM: The Interview Guide for Security Practitioners 10 October 2026 soc security-frameworks interview career governance field-guide
Related Is Not Identical: Framework and Control Mapping Without the Spreadsheet Monster 8 October 2026 soc control-mapping security-frameworks security-assurance governance field-guide
Lead With the Decision: Executive Security Risk Reporting 5 October 2026 soc risk-reporting security-assurance risk-management governance field-guide
Which Part? Cloud and SaaS Security Assurance 4 October 2026 soc cloud-security supplier-assurance security-assurance risk-management field-guide
Not the Assessment Itself: How to Design a Supplier Security Questionnaire 3 October 2026 soc supplier-assurance security-assurance risk-management governance field-guide
Read the Scope Before the Findings: How to Review a Penetration Test Report 2 October 2026 soc penetration-testing supplier-assurance security-assurance risk-management field-guide
Count Is Not Risk: Security Metrics, KPIs and KRIs That Actually Matter 1 October 2026 soc security-metrics security-assurance risk-management governance field-guide
A Clean Opinion Is Not Zero Risk: How to Read a SOC 2 Report 30 September 2026 soc soc-2 supplier-assurance security-assurance risk-management field-guide
Present Is Not Effective: How to Test Security Controls 29 September 2026 soc security-assurance control-testing risk-management governance field-guide
Inherent Risk Comes First: Supplier Security Assurance for Analysts 28 September 2026 soc supplier-assurance third-party-risk security-assurance risk-management field-guide
A Claim Is Not Evidence: Security Assurance for SOC Analysts 27 September 2026 soc security-assurance supplier-assurance risk-management governance field-guide
Same Problem, Four Lenses: CIS vs NIST vs ISO 27001 vs NZISM 26 September 2026 soc cis-controls nist-csf iso-27001 nzism security-frameworks field-guide
Search It, Don't Memorise It: NZISM for Security Practitioners 25 September 2026 soc nzism security-frameworks governance supplier-assurance field-guide
Check the Scope First: ISO 27001 for SOC Analysts 24 September 2026 soc iso-27001 security-frameworks governance supplier-assurance field-guide
Six Functions, Not Six Steps: NIST CSF 2.0 for SOC Analysts 23 September 2026 soc nist-csf security-frameworks governance risk-management field-guide
Beyond the Alert: CIS Critical Security Controls v8.1 for SOC Analysts 22 September 2026 soc cis-controls security-frameworks governance vulnerability-management field-guide
One Alert Is Not the Incident: Scoping Security Incidents in the SOC 21 September 2026 soc incident-response investigation scoping threat-hunting dfir field-guide
Windows Event Logs for SOC Analysts: What an Event ID Actually Proves 20 September 2026 soc windows windows-event-logs investigation dfir detection field-guide
Threat Hunting for SOC Analysts: Turning a Suspicion Into a Searchable Hypothesis 20 September 2026 soc threat-hunting investigation detection-engineering siem splunk kql dfir field-guide
SPF, DKIM and DMARC: What They Actually Prove (and What They Don't) 20 September 2026 email-security phishing spf dkim dmarc soc dfir field-guide
Ransomware Before the Ransomware: What the SOC Should See Before Encryption Starts 20 September 2026 soc ransomware incident-response investigation detection-engineering threat-actors qilin dfir field-guide
PowerShell Is Not the Alert: Investigating Living-off-the-Land Activity 20 September 2026 soc powershell lolbins windows investigation detection-engineering dfir field-guide
The IP Isn't the Attacker: A SOC Analyst's Guide to NAT, VPNs and Proxies 20 September 2026 soc blue-team networking field-guide skills
Identity Attacks for SOC Analysts: Sessions, Tokens, MFA and Account Compromise 20 September 2026 soc identity entra-id microsoft-365 account-compromise authentication incident-response investigation field-guide
How to Think Like a SOC Analyst in an Interview 20 September 2026 soc investigation interview incident-response analyst-methodology field-guide career
From Header to Host: Investigating Phishing in the SOC 20 September 2026 soc phishing email-security investigation identity incident-response dfir field-guide
Alert to Conclusion: Investigating Without Tunnel Vision 20 September 2026 soc investigation threat-hunting field-guide
OSINT Corroboration: How Do I Know I've Found the Right Person? 19 September 2026 osint investigation verification trace-labs field-guide
Social Media OSINT: From One Profile to a Digital Footprint 18 September 2026 osint social-media trace-labs investigation field-guide
Google Dorking for Trace Labs: 50 OSINT Investigation Pivots 17 September 2026 osint trace-labs google-dorking investigation research field-guide
Google Dorking for OSINT: The Practical Investigator's Guide 16 September 2026 osint google-dorking trace-labs skills field-guide
Trace Labs OSINT Search Party CTF 2026 (DEF CON 34) 21 August 2026 ctf osint trace-labs
ProxLab: A Friendlier Front End for the Proxmark3 21 August 2026 tools physical-security rfid proxmark3
Kase Scenarios - Orkla: Dragon Con Detective 30 October 2024 beginner ctf kase-scenarios orkla osint skills
Kase Scenarios - Orkla: Bounty Hunt 14 October 2024 kase-scenarios orkla osint skills
Kase Scenarios - Betrayal 13 July 2023 betrayal ctf kase-scenarios osint skills
The Insider Threat CTF (1) 3 May 2023 ctf osint skills
Spiderfoot 21 April 2023 osint skills socmint spiderfoot tools
KaffeeSec - SoMeSINT 19 April 2023 ctf osint try-hack-me
Kase Scenarios - Dark Waters 16 April 2023 ctf dark-waters osint skills
Simple HTTP Server 5 April 2022 http-server skills tools
A Beginners Guide to the Dark Web 5 April 2022 dark-web skills
A Simplified Explanation of the OSI 7 Layer System 30 March 2022 osi-model skills