Blog

// Writing

Security write-ups, frameworks, and field notes.

Mar 10, 20262 min read

Building an Advanced Framework Against Ransomware

A layered defense model for ransomware resilience, from prevention and detection through containment and recovery — grounded in NIST CSF and MITRE ATT&CK.

RansomwareIncident ResponseNIST CSFMITRE ATT&CK

Jan 22, 20262 min read

Shift-Left Security: Embedding AppSec Into the SDLC

How to move security review from a pre-release gate to a continuous part of development — practical steps for secure code review, SAST/SCA tooling, and developer buy-in.

DevSecOpsSDLCOWASP Top 10Secure Code Review