2026-03-18
Designing SOC Simulations Analysts Actually Revisit
Why we bias toward repeatable triage mechanics instead of cinematic breach stories, and how teams measure reuse.
Curriculum · SOC · Measurement
Blog
Dispatch from the lab
Practical writing on rubrics, hunt closures, and the boring dashboards that actually help managers.
2026-02-02
Handover Packets: Small Format, Big Debt Reduction
A field note on the Triage Clock module and why overlap notes outperform long wiki threads.
Operations · Shift work
2025-12-14
Hunt Hypotheses That Fail in Public (On Purpose)
Stream Hound missions include instructor-led teardowns of dead ends—here is what we protect in those moments.
Threat hunting · Pedagogy
2026-01-09
Readiness Dashboards Without Vanity Metrics
What we recommend security managers track after a simulation sprint—and what we politely ignore.
Leadership · Metrics
2025-11-27
Customer Success: Translating Lab Findings to Policy Tweaks
How Tabletop Bridge sessions stay grounded when leaders want sweeping transformations overnight.
Customer success · GRC