whitepaper
Threat Modeling That Produces Testable Controls
A practical method for turning system boundaries and abuse paths into owned controls, observable evidence, and repeatable tests.
- Published
- Reviewed
- Reviewed
Learn · research
Source-linked cybersecurity research
Original Baitaphish briefs connect practical security decisions to named authors, review dates, primary sources, and explicit limitations.
Editorial library
Published research
brief
Why Provenance Matters in Security Intelligence
Provenance turns a security claim into a traceable record of source, transformation, review, and intended use—without pretending lineage alone guarantees truth.
- Published
- Reviewed
- Reviewed
whitepaper
NIST SP 800-61r3: Incident Response and Cybersecurity Risk Management
NIST's current incident-response guidance integrates preparation, response, recovery, and continuous improvement across the six CSF 2.0 Functions.
- Published
- Reviewed
- Reviewed
repo
Repo Brief: Open Policy Agent (OPA) — Policy-as-code for authorization and guardrails
OPA lets you centralize policy decisions (Rego) for authz and compliance across microservices, Kubernetes, CI, and more.
- Published
- Reviewed
- Reviewed
repo
Repo Brief: SigmaHQ/Sigma (Portable Detection Rules)
Sigma is a detection-rule format that lets you write once and translate to multiple SIEM backends (Splunk, Sentinel, etc.).
- Published
- Reviewed
- Reviewed
whitepaper
SLSA: Supply-chain Levels for Software Artifacts (What to actually implement)
SLSA is a maturity model for build provenance and tamper resistance. The real value is disciplined build pipelines and signed attestations.
- Published
- Reviewed
- Reviewed