From the Scroll
Thoughts, analysis, and writing on cyber threat intelligence. Longer form than a tweet, shorter than a whitepaper.
Show Your Work: Building a CTI Portfolio That Actually Helps You Get Hired
Most of what CTI analysts write at work lives under NDA, so how do you prove you can do the job? You make your own samples. This is the start of a five-part series where we build a whole CTI portfolio from one investigation: a profile, a deep pivot, a script, an exec brief, and an AI agent.
Read post →Roll for Investigation: A Beginner's Guide to Pivoting
One suspicious domain is a clue. Pivoting is how you turn it into the whole picture. Free tools, a safe hands-on exercise, and an interactive lab to practice the one skill beginners get wrong the most.
Read post →Bring a Belt: Everything I Know About Speaking at Cybercons
Real talk on CFPs, slide decks, stage nerves, and yes, why you should always pack a belt. A culmination of advice from a panel celebrating two years of Simply Cyber's Public Speaking Group I did back in April.
Read post →Scattered Spider MGM Intrusion: Diamond Model
Applying the Diamond Model of Intrusion Analysis to a Real Intrusion
Read post →Why I Wouldn't Mess With Iran
A deep dive into an Imperial Kitten campaign and a quick look at Iran’s recent cyber successes.
Read post →Who is CTIJen?
My background both in tech and very much not in tech.
Read post →