Posts

Black Hat webinar review 2026: From alert fatigue to machine-speed defense: Using agentic AI to compress the distance between detection, investigation, and response.

  Takeaways from Blackhat webinar: Prevention at Machine Speed: Hunting Beyond Known Detections Elastic’s approach to AI-powered security immediately stood out to me during the Black Hat webinar “Prevention at Machine Speed: Hunting Beyond Known Detections.” James Spiteri and Paul Ewing demonstrated considerable enthusiasm when discussing Elastic’s investment in agentic AI, threat hunting, and security workflows designed to help analysts work more efficiently. The real value of agentic AI may be its ability to reduce the amount of routine investigation that consumes an analyst’s time. Having toured the NOC at Black Hat and security responsibilities as one of my hats, I understand how standard alerts can divert attention from more important operational and security issues. Elastic’s approach goes beyond simply having an assistant handle routine alerts. Attack Discovery can correlate related alerts, analyze security data, and provide analysts with a broader narrative of poten...
Post a Comment
Read more

PYTHON - System Administration Script

Image
This was made in Visual Studio Code within a virtual environment. The most important commands in working with your virtual environment are: 1. Create your virtual environment > py -m venv env 2. Activate your virtual environment > env\Scripts\activate 3. Go to View > select Command Palette > Select Python Interpreter > (env:venv) 3. Run your application > py main.py =========== NOTE:  (DESKTOP users only) To view script > left click > right click - open image in new tab > the cursor turns into a plus sign > left click > will offer zoomed in mode. -------------------------------------------------------------------------------------- OUTPUT Screenshot I Screenshot II Screenshot III ================================ Code base I. main.py II. Banners.py NOTE:  (DESKTOP users only) To view script > left click > right click - open image in new tab > the cursor turns into a plus sign > left click > will offer zoomed in mode. main.py I Ban...
Post a Comment
Read more

Asking the right questions in Cloud Security

Image
  Nothing in life is to be feared; it is only to be understood. Now is the time to understand more, so that we fear less.              Marie Curie 2025 SANS Cloud Security Exchange was the most incredible learning experience. Those new to the industry simply have to be a part of of attending SANS events such as this. I recently attended SANS 2025 Cloud Security Exchange, where I learned more about designing end-to-end security architectures using Zero Trust principles. The opportunity to learn directly from some of the most influential leaders in this domain was unparalleled; SANS publicised this as being the event of the year to directly interact with the guest speakers, providing an opportunity to learn what may take years, if one expects such nuggets of knowledge to come from experience. The speakers were generous with their time and thoughtful in their responses--making the take aways more than knowledge to apply as best practices, this b...
Post a Comment
Read more

Python project: DevOps Blue/Green Deployment using VS Code | Developer PowerShell

Image
  Blue/Green Deployment with AWS Lambda  This hands on DevOps project uses two versions of a Lambda function for blue/green deployment . An alias is used to switch traffic between them. An alias is a pointer which directs traffic between two version.  This project assumes an AWS account has already been created, and permissions have been granted to access/manage Lambda, IAM, and awscli if one is not root when accessing the AWS console and services.  VS Code is the IDE being used with a virtual environment and PowerShell for the terminal. Step 1: Set up the virtual enironment. The most important commands in working with your virtual environment are: Create your virtual environment py -m venv env Activate your virtual environment env\Scripts\activate TODO: It's also a good idea to update pip using the following command: py -m pip install --upgrade pip   Go to View > select Command Palette > Select Python Interpreter > (env:venv) Configure credenti...
Post a Comment
Read more