What your SOC isn't telling you.

3 min read

From CMDB to CAASM: Operationalizing Asset Intelligence

The gap between where most enterprises are on asset intelligence - a CMDB with...

2 min read

Why Divergent Teams Drive True Security Collaboration

When people ask me what makes the Resolution Intelligence Cloud different from...

2 min read

Detecting Advanced Persistent Threats (APT) via Sequences

Sophisticated adversaries design their individual actions to be unremarkable. A...

2 min read

How Continuous Security Monitoring Exposes Blind Spots

There is a framework for thinking about what you know and don't know about the...

3 min read

LLM Grounding: Why RAG Transforms Enterprise AI Security

The most common failure mode I observe in LLM deployments for security...

2 min read

Cybersecurity Partners: Building Trust & Shared Value

I want to use this post to say something I do not say publicly often enough.

2 min read

AI Governance in Security: Human In or On the Loop

"Human in the loop" appears in virtually every AI governance in security...

3 min read

What AI Agents Taught Me About the Autonomous SOC

When I talk about agentic AI and the path toward an autonomous SOC at...

3 min read

Why The Unified Security Data Lake Multiplies Everything

When we built the Resolution Intelligence Cloud, one of the early decisions...

2 min read

The True Vision Behind Cyber Risk Quantification

The Moment I Understood What We Were Really Building

About two years into the...

3 min read

NLP: Operationalizing AI Threat Detection

There is a specific inefficiency in how most organizations consume threat...

2 min read

Bootstrapping and Maximizing the Cybersecurity Budget

The decision to rebuild Netenrich without raising outside capital in 2018 was...

2 min read

Adversary Path Modeling: Proactive Threat Modeling

Lateral movement is one of the most important adversary techniques to detect -...

2 min read

The Biggest Flaw in Security Operations Architecture

There is a structural mismatch at the heart of most enterprise security...

2 min read

Using Graph Analytics for Lateral Movement Detection

There was a specific moment in an early customer engagement that changed how I...

2 min read

The Flywheel of SecOps Automation and Domain Memory

In conversations with security leaders, I often ask a question that produces a...

2 min read

Turning Cyber Threat Intelligence Into Action

There is a specific moment in any security investigation when context changes...

2 min read

How Innovation Gets Valued Among Cybersecurity Vendors

I want to tell the OpsRamp story honestly, because it contains a lesson about...

3 min read

Entity Resolution: The Foundation of Cross-Source UEBA

Early in the Netenrich 2.0 build, one of our data science leads surfaced a...

3 min read

Being the Underdog in the Security Operations Center (SOC)

Let me tell you something I mean without any false modesty: I genuinely love...

2 min read

What Machine Learning Threat Detection is Good At

After six years of applying machine learning to security operations problems at...

2 min read

GenAI: Building a Foundation for AI in Cybersecurity

When I talk about Netenrich's use of large language models and agentic systems,...

2 min read

Why Classification Fails in Security Data Analytics

When we started building the Resolution Intelligence Cloud in 2018, one of the...

3 min read

How We Built a Team of Top Cybersecurity Talent

When I committed to making Netenrich a data-first, intelligence-first security...

2 min read

Left-Shifting Security Data Engineering Changes Everything

There is a pattern in how security programs try to improve detection quality...

2 min read

What Losing My Company Taught Me About Cyber Resilience

I want to tell you a story I don't talk about often enough. Not because it is...

2 min read

Beyond CMDBs: Modernizing IT Asset Management (ITAM)

The configuration management database is one of those enterprise systems that...

2 min read

Digital Tone: A New Approach to Digital Risk Protection

Most security frameworks describe the enterprise as a collection of assets:...

2 min read

The A.C.T. Framework for Vulnerability Prioritization

Security teams face a persistent vulnerability prioritization problem. At any...

2 min read

Cyber Risk Management: Fix the Roof Before the Rain

Most security frameworks describe the enterprise as a collection of assets:...

2 min read

Attack Surface Management: One Question CISOs Must Answer

Ask any CISO in any organization of any size: do you know your complete attack...

2 min read

Starting Over: A Blueprint for SOC Modernization

In 2018, I had just watched OpsRamp find its home at HPE. Six years of building...