Discover

Find what's worth reading

Featured, editor-picked, recently published, and recommended — an evergreen way to browse TrueCustodian, not a chase for whatever's trending this week.

Featured

Editorially selected

SOC

Triaging Your First SOC Alert Without Losing Your Mind

A practical walkthrough of the first ten minutes after an alert fires — what to check, what to ignore, and how to write it up.

Aisha RahmanJun 2, 20263 min read

Cloud Security

A Practitioner's Primer on Container Escapes

How misconfigured capabilities and mounted sockets turn a compromised container into a host takeover.

Priya NairMay 10, 20262 min read

AI Security

Prompt Injection in the Wild: Three Real Bypasses

Case studies of prompt injection against production LLM features, and the guardrails that actually held up.

Daniel OseiMar 30, 20262 min read

Worth your time

VAPT

Scoping a Web App Pentest So Nothing Gets Missed

The checklist we use before every engagement kickoff to keep scope, auth boundaries, and rules of engagement airtight.

Marco DelgadoMay 21, 20262 min read

Digital Forensics

Memory Forensics With Volatility3: A Field Guide

Extracting process trees, network artifacts, and injected code from a memory image using Volatility3 plugins.

Sofia MarchettiApr 14, 20262 min read

Recently Published

Fresh from the library

Threat IntelligenceBrief

CISA Adds New KEV Entries for Edge Appliance Flaws

Two newly catalogued vulnerabilities affecting perimeter appliances have confirmed exploitation in the wild, per the latest KEV update.

TrueCustodianJul 20, 20262 min read

DevSecOpsBrief

Popular CI/CD Plugin Patches Critical Auth Bypass

A widely used pipeline plugin shipped a fix for a flaw that allowed unauthenticated triggering of arbitrary build jobs.

TrueCustodianJul 16, 20262 min read

Detection EngineeringBrief

New Sigma Rule Pack Released for Living-off-the-Land Binaries

A community-maintained Sigma repository shipped a fresh batch of rules targeting LOLBAS abuse patterns seen in recent incidents.

TrueCustodianJul 10, 20262 min read

Recommended

Across the categories

SOCBrief

Survey: SOC Analysts Report Rising Alert Fatigue in 2026

A new industry survey finds a majority of analysts spend more than half their shift on alerts later closed as benign.

TrueCustodianJul 3, 20262 min read

Cloud SecurityBrief

Major Cloud Provider Rolls Out Default Encryption for Object Storage

New buckets will be encrypted at rest by default, closing a gap that has repeatedly led to misconfiguration-driven exposures.

TrueCustodianJun 28, 20262 min read

Detection Engineering

Building a Detection Rule in Sigma From Scratch

From raw log fields to a portable Sigma rule — with the pitfalls that make detections noisy in production.

Tomasz WiśniewskiApr 28, 20262 min read

Keep exploring