Phil Neray

How the Cloud Changes SecOps and Incident Response: Lessons from a Real-World Living-Off-The-Cloud Attack

Adversaries are increasingly targeting multi-cloud infrastructures to disrupt operations and demand ransomware, exfiltrate sensitive data, and steal funds.

The Future of Log Centralization for SIEMs and DFIR – Is the End Nigh?

Does centralizing log data still make sense, or should we be thinking about decentralized approaches such as federated data storage or distributed data storage, leveraging security data lakes and other repositories?

The Future of Risk-Based Detection

Detecting attacks in their earliest stages—before they impact your business—is a key element of an effective threat detection and incident response (TDIR) strategy.