Detection coverage in the average European SOC, measured
Twelve SOCs against the same simulated chain. Coverage gaps cluster in three predictable places.
Whitepapers & reports
Primary research, working references, and long-form investigations from our editors and contributors. Free to download. No vendor co-branding.
The NIS2 incident-response runbook, for teams that actually run one
A working template for the 24-hour early warning, with sample escalations and named ownership.
Quiet Harbor: the full technical write-up
Indicators, host artefacts, network telemetry, and a timeline reconstructed from nine victim environments.
An SBOM you can actually defend in court
What a useful Software Bill of Materials looks like when the question is liability, not procurement.
Identity-provider hardening: the five controls that move the needle
From a year of incident-response retainers, ranked by what actually changed attacker dwell time.
The affiliate ransomware economy, quarter by quarter
Who consolidated, who disappeared, who showed up, and what their tooling looks like now.