@sec_doc

Simply pointing out the obvious about security and anything...A nerd at heart...My opinions are always mine - #infosec #security #cybersecurity

 Texas
secdoc.tech
Joined November 2009
  • Tweets740
  • Following119
  • Followers99
18Media
The Joiner, Mover, Leaver Process Is a Distributed System secdoc.tech/the-joiner-mover… #identity #identiy-access-management #iam #scim #lifecycle-management #reconciliation #zero-trust #open-source #cybersecurity

The Joiner, Mover, Leaver Process Is a Distributed System

Joiner, mover, and leaver automation works only when identity teams treat it as a distributed state machine with durable events, immutable identifiers, reconciliation, and tested failure handling.

secdoc.tech
1
47
Break-Glass Access That Does Not Quietly Become Normal Access secdoc.tech/break-glass-acce… #identity-access-management #privileged-access #break-glass #incident-response #open-source #security-architecture #cybersecurity #CAH2 #packt #NIST #keycloak #authentik #freeipa

Break-Glass Access That Does Not Quietly Become Normal Access

A practical design for emergency access that remains independent, time-bounded, observable, testable, and difficult to normalize into an ordinary administration path.

secdoc.tech
30
Proving Least Privilege with Denial Tests secdoc.tech/proving-least-pr… #identity-access-management #least-privilege #authorization #policy-as-code #open-source #security-testing #cybersecurity #CAH2 #packt @PacktPublishing

Proving Least Privilege with Denial Tests

Least privilege is not proved by showing that approved work succeeds. It is proved by testing the nearby actions, resources, identities, and conditions that policy must deny.

secdoc.tech
17
The Architecture Review Must End with a Decision secdoc.tech/the-architecture… #security-architecture #architecture-review #governance #decision-records #devsecops #open-source #cybersecurity #CAH2 #packt

The Architecture Review Must End with a Decision

An architecture review earns its cost only when it produces an explicit decision, bounded conditions, accountable owners, verification criteria, and a durable record.

secdoc.tech
1
13
AI needs controls. Security skills need practice. Explore practical cybersecurity architecture, AI security, and hands-on lab guidance from Lester Nichols at secdoc.tech. Security made simple. #CAH2 #cybersecurity youtu.be/NQ8T97Ob1BA

secdoc.tech

In a World with Threats Around Every Corner...Explore practical cybersecurity architecture, AI security, and network defense guides from Lester Nichols, author of the Cybersecurity Architect's...

secdoc.tech
27
Security Exceptions Are Architecture Decisions with Expiration Dates #security-architecture #risk-management #governance #policy-as-code #devsecops #open-source #cybersecurity secdoc.tech/security-excepti…

Security Exceptions Are Architecture Decisions with Expiration Dates

A security exception changes the effective architecture, so it needs an owner, bounded scope, compensating controls, verification evidence, and an enforced expiration path.

secdoc.tech
24
An Installed Agent Is Not Security Coverage secdoc.tech/an-installed-age… #wazuh #endpoint-security #security-monitoring #asset-management #open-source #detection-engineering @wazuh

An Installed Agent Is Not Security Coverage

Why package installation, registration, policy synchronization, telemetry, indexing, and alert visibility must be measured as separate security coverage gates.

secdoc.tech
16
Fail Closed Without Standing Still secdoc.tech/fail-closed-with… #security-automation #devsecops #platform-engineering #wazuh #open-source #reliability

Fail Closed Without Standing Still

What a stalled security-agent rollout taught me about safe concurrency, elapsed-time holds, blocker states, evidence, and automation that keeps making progress.

secdoc.tech
1
38
How to Test Yourself in a Personal Cybersecurity Lab secdoc.tech/how-to-test-your… #basicseries #cybersecurity-basics #cybersecurity-skills #homelab #virtualization #virtualization #linux #windows #networking #security-monitoring #cah2 #packt

How to Test Yourself in a Personal Cybersecurity Lab

A practical skills checklist for building a personal VM lab, testing what you know, collecting evidence, and recovering from your own mistakes.

secdoc.tech
1
1
37
A Secret Scan Is a Release Gate, Not a Pipeline Decoration secdoc.tech/a-secret-scan-is… #devsecops #secrets-management #trufflehog #application-security #supply-chain-security #open-source

A Secret Scan Is a Release Gate, Not a Pipeline Decoration

How to use TruffleHog to find and verify exposed credentials, block unsafe releases, and keep secret scanning useful in a real DevSecOps pipeline.

secdoc.tech
28
Retiring a Security Platform Without Bringing It Back by Accident secdoc.tech/retiring-a-secur… #security-architecture #decommissioning #siem #identity #disaster-recovery #open-source

Retiring a Security Platform Without Bringing It Back by Accident

Decommissioning is the controlled removal of authority, dependencies, identities, and startup paths, not a power-off event.

secdoc.tech
16
A Backup Is Not Recovery Evidence secdoc.tech/a-backup-is-not-… #backup #disaster-recovery #resilience #proxmox #open-source #security-architecture #basics-series #cyberscurity-architecture

A Backup Is Not Recovery Evidence

A completed backup proves data was written somewhere. Recovery evidence proves the right service can be restored safely, within its objective, without colliding with production.

secdoc.tech
20
AI Guardrails Are Operating Controls, Not Prompt Instructions secdoc.tech/ai-guardrails-ar… #ai-governance #ai-security #guardrails #security-architecture #risk-management #responsible-ai #cah2 #packt #2guystek

AI Guardrails Are Operating Controls, Not Prompt Instructions

A practical baseline for governing AI authority, data, tools, consequential actions, evidence, and lifecycle risk without mistaking a system prompt for a security boundary.

secdoc.tech
16
Security Architecture in an AI and Quantum World: My Conversation with 2GuysTek secdoc.tech/security-archite… #security-architecture #cybersecurity #artificial-intelligence #zero-trust #post-quantum-cryptography #career-development #youtube #cah2 #packt @PacktPublishing @2GuysTek

Security Architecture in an AI and Quantum World: My Conversation with 2GuysTek

A conversation with Rich from 2GuysTek about the Cybersecurity Architect's Handbook, the fundamentals that still matter, and how architects should approach AI, zero trust, quantum readiness, and...

secdoc.tech
25
Threat Modeling the System That Actually Exists secdoc.tech/threat-modeling-… #threat-modeling #risk-assessment #security-architecture #mitre-attack #nist #open-source #cah2 #packt

Threat Modeling the System That Actually Exists

A useful threat model tracks live trust boundaries, administration paths, transition states, recovery systems, evidence dates, and the changes that made the old model wrong.

secdoc.tech
28
Building a Security Control Plane Without Creating Another Crown Jewel secdoc.tech/building-a-secur… #devsecops #cerebro #security-architecture #SOC #platform-engineering #open-source #zero-trust

Building a Security Control Plane Without Creating Another Crown Jewel

What I learned building a read-only security visibility layer across SIEM, DFIR, vulnerability, identity, secrets, network, virtualization, and recovery platforms.

secdoc.tech
18
The SOC Pipeline Had to Work Before I Wrote About It secdoc.tech/the-soc-pipeline… #soc #soar #SIEM #cybersecurity #security-architecture #book #CAH2 #community #graylog #wazuh #devsecops #detection-engineering #packt @PacktPublishing

The SOC Pipeline Had to Work Before I Wrote About It

Why I waited for a tested implementation before documenting the SOC pipeline, and what delivery failures, replay storms, migration work, and alert floods taught me.

secdoc.tech
1
36
Inspect Both Sides of the LLM Conversation secdoc.tech/inspect-both-sid… #cah2 #packt #ai-security #prompt-injection #llm-security #application-security #data-loss-prevention #cybersecurity #cybersecurity-architecture @PacktPublishing

Inspect Both Sides of the LLM Conversation

A practical policy and configuration guide for detecting prompt injection and jailbreak attempts before inference, then blocking unsafe content and sensitive-data disclosure before model output...

secdoc.tech
2
37
Prompt Injection Is an Authorization Failure with Words Attached secdoc.tech/prompt-injection… #prompt-injection #ai-agents #authorization #confused-deputy #security-architecture #open-source #cybersecurity #llm-security

Prompt Injection Is an Authorization Failure with Words Attached

After reading my post on AI firewalls, a friend asked for my take on prompt injection. Prompt injection becomes dangerous when untrusted content can steer a software principal into using authority...

secdoc.tech
1
42
Mastering Ubuntu Server, Fifth Edition: Strong Foundations with a Few Sharp Edges secdoc.tech/mastering-ubuntu… #book #packt #review #ubuntu #linux #cybersecurity #automation #server-administration @PacktPublishing @JayTheLinuxGuy

Mastering Ubuntu Server, Fifth Edition: Strong Foundations with a Few Sharp Edges

A hands-on review of Ken VanDine and Jay LaCroix's practical guide to Ubuntu Server 26.04, based on the supplied Early Review Copy.

secdoc.tech
21
Load more