Practical, opinionated essays for blue teamers and SOC analysts on alert fatigue, detection design, and the trade-offs of security operations. Readers get concrete frameworks such as alert budgets and commentary on the state of AppSec and defensive strategy.
Website: https://buildingsecops.com/
A practitioner's blog on using LLMs and coding agents in detection engineering, covering query writing, a packaged rule-development workflow, and metrics for maintaining a detection catalog. Posts explain the reasoning behind each design choice and the failures that shaped it.
Long-form, first-person articles on security architecture and operations, covering topics such as read-only security visibility layers, break-glass access design, and identity lifecycle processes. Readers get practical design reasoning tied to standards like NIST SP 800-53 and to a real self-hosted security stack.
Practical articles for small cybersecurity teams working with limited time, budget and staff. Issues cover lightweight project management, incident response micro-automation and justifying security spending to management.
Magonia Research publishes practical essays for SOC and detection engineers, covering false positive rate math, the Mythos exploit debate, and operationalizing attack frameworks like ATT&CK, the Kill Chain and the Diamond Model. Readers get concrete reasoning from a practitioner with long experience running SOCs and writing detection logic.
One short email a week with hand-picked newsletters from the index. Free, no spam, unsubscribe anytime.
