Kerberoasting, explained for defenders
Why Kerberoasting keeps showing up in Active Directory assessments, and the handful of changes that shut it down.
Writing
Blog
Notes on offensive security, Active Directory, web application testing and writing reports people act on.
Writing pentest reports people actually read
A findings report is a product, not a formality. How I structure one so both engineers and executives act on it.