STRAP: attack paths at AWS organization scale
Why per-account IAM inventories fall short in AWS Organizations, and how we analyse effective access paths across accounts.
Engineering Journal
Engineering publication from the TechRebel team. Research and technical notes, on this site.
KATANA: deciding at admission which images enter the cluster
Why CI scanning is not enough, and how a ValidatingAdmissionWebhook can enforce vulnerability policy before a Pod exists.
The attacker wasn't invisible. Your logging was.
How cost-driven choices in CloudTrail and VPC Flow Logs reduce the ability to reconstruct AWS incidents.