Writing

Thoughts on cloud, AI, and engineering.

Draft

What MITRE ATT&CK coverage actually measures (and what it misses)

Extending a USENIX Security paper revealed that ATT&CK coverage is partly an artefact of where your telemetry lives — not just detection effort.

2026-05 · 2 min read

Coming soon

Draft

Designing an agentic compliance workflow on Azure

How I structured an AI-driven document assessment pipeline for regulated industries.

2024 · 1 min read

Coming soon