https://knowngood.au/https://knowngood.au/privacyhttps://knowngood.au/writinghttps://knowngood.au/writing/anatomy-of-an-identity-compromisehttps://knowngood.au/writing/building-a-sentinel-detection-lab-part-1-catching-brute-force-and-the-bug-that-flagged-the-wrong-accounthttps://knowngood.au/writing/building-a-sentinel-detection-lab-part-2-suspicious-powershell-and-why-some-detections-need-no-thresholdhttps://knowngood.au/writing/building-a-sentinel-detection-lab-part-3-my-detection-flagged-legitimate-windows-behavior-here-s-how-i-tuned-it-without-going-blindhttps://knowngood.au/writing/building-a-sentinel-detection-lab-part-4-catching-reconnaissance-and-the-case-sensitivity-bug-that-made-it-look-brokenhttps://knowngood.au/writing/building-a-sentinel-detection-lab-part-5-mfa-registration-a-missing-license-and-the-first-detection-that-talks-backhttps://knowngood.au/writing/building-a-sentinel-detection-lab-part-6-shadow-ai-and-the-detection-that-s-honest-about-what-it-hasn-t-proven-yethttps://knowngood.au/writing/building-a-sentinel-detection-lab-part-7-the-detection-that-taught-me-my-own-telemetry-s-blind-spothttps://knowngood.au/writing/building-a-sentinel-detection-lab-part-8-watching-for-agents-not-just-attackershttps://knowngood.au/writing/fortibleed-jadepuffer-coverage-audithttps://knowngood.au/writing/humans-aren-t-the-weakest-linkhttps://knowngood.au/writing/mitre-attack-v18-v19-detection-strategieshttps://knowngood.au/writing/series/building-a-sentinel-detection-labhttps://knowngood.au/writing/series/social-engineering-in-the-logshttps://knowngood.au/writing/what-an-mfa-prompt-actually-proveshttps://knowngood.au/writing/what-your-logs-can-t-see