All posts
Topic
Security Operations
3 articles on security operations.
Where Ransomware Crews Gather: A Defender's Map of the Underground
A defensive threat-intelligence explainer on the venue types that power the ransomware economy - forums, RaaS portals, initial-access brokers, leak sites - and how defenders and law enforcement monitor and disrupt them.
September 10, 2026
How Ransomware Crews Hide - And How They Get Caught
Inside the operational security ransomware operators use to stay anonymous, and the recurring OPSEC mistakes, blockchain tracing, infrastructure seizures and leaks that keep unmasking them anyway.
September 10, 2026
Deploying D2D Agentic Architecture in a Real Security Operations Team
Lessons from wiring up a D2D multi-agent system to a production SOC: the PagerDuty integration, the human review queue, what broke, and what surprised us.
July 13, 2026