🕵️Implementing a Hypothesis-Driven Threat Hunt for TOR Activity Detecting, investigating, and responding to unauthorized anonymous browsing using endpoint telemetry. Executive Summary This case study documents a hypothesis-driven threat hunt conducted to identify unauthorized TOR browser usage within an enterprise environment. Management suspected that employees were bypassing network controls due to unusual encrypted traffic patterns andContinue reading “🔐Threat Hunting Case Study: Unauthorized TOR Usage”
Author Archives: Joseph Johnson
🔐Vulnerability Management Program – Case Study
⚠️Implementing an Enterprise Vulnerability Management Program Designing, deploying and operationalizing a full vulnerability management lifecycle in an Azure-based enterprise environment. Executive Summary This case study documents the design and execution of an end-to-end vulnerability management program from the ground up. The organization initially lacked formal policy, scanning cadence and remediation ownership. Through governance development, authenticatedContinue reading “🔐Vulnerability Management Program – Case Study”
Who is the Weakest Link?
“I’m starting with the man in the mirror, I’m asking him to change his ways. And no message could have been any clearer, if you wanna make the world a better place, take a look at yourself, and then make a change.” Firewalls. Encryption algorithms. Secure Cloud architectures. Card Scanners. CCTV cameras. Companies spend millionsContinue reading “Who is the Weakest Link?”
