Security Field Notes & Technical Insights

// Authorised Incident Response · Regulatory Architecture · Defensive Engineering

INCIDENT RESPONSE · THM FIRST SHIFT

SOC Analyst Field Notes: Investigating & Containing the "Portal Drop" Web Shell Breach

Deep forensic walkthrough correlating Apache web access logs with EDR detections to triage brute-force ingress, Base64-obfuscated RCE, reverse shells, and config exfiltration. Includes downloadable 9-page technical PDF dossier.

Nov 2025 · 8 Min Read Read Case Study →
DATA PROTECTION · KDPA & ODPC

The Kenya Data Protection Act (KDPA) Developer Checklist: What Engineering Teams Get Wrong

Why privacy policies alone won't prevent statutory fines. A code-level guide to automated data minimization, consent gates, column-level encryption, and 72-hour breach audit logging for Kenyan startups.

Sep 2026 · 6 Min Read Read Guide →