<?xml version="1.0" encoding="utf-8"?><feed xmlns="http://www.w3.org/2005/Atom" ><generator uri="https://jekyllrb.com/" version="3.10.0">Jekyll</generator><link href="https://pebcak-consulting-llc.github.io/feed.xml" rel="self" type="application/atom+xml" /><link href="https://pebcak-consulting-llc.github.io/" rel="alternate" type="text/html" /><updated>2026-10-27T17:49:48+00:00</updated><id>https://pebcak-consulting-llc.github.io/feed.xml</id><title type="html">PEBCAK Consulting LLC</title><subtitle>Professional consulting services and technical insights.</subtitle><entry><title type="html">Building Ulysses-MCP - From Frustration to a Smarter Writing Workflow</title><link href="https://pebcak-consulting-llc.github.io/mcp/ai/writing/workflow/2025/10/30/building-ulysses-mcp-from-frustration-to-a-smarter-writing-workflow.html" rel="alternate" type="text/html" title="Building Ulysses-MCP - From Frustration to a Smarter Writing Workflow" /><published>2025-10-30T16:00:00+00:00</published><updated>2025-10-30T16:00:00+00:00</updated><id>https://pebcak-consulting-llc.github.io/mcp/ai/writing/workflow/2025/10/30/building-ulysses-mcp-from-frustration-to-a-smarter-writing-workflow</id><content type="html" xml:base="https://pebcak-consulting-llc.github.io/mcp/ai/writing/workflow/2025/10/30/building-ulysses-mcp-from-frustration-to-a-smarter-writing-workflow.html"><![CDATA[<h1 id="building-ulysses-mcp---from-frustration-to-a-smarter-writing-workflow">Building Ulysses-MCP - From Frustration to a Smarter Writing Workflow</h1>

<p>For the past 20+ years, I’ve lived and breathed technical writing — documentation, reports, manuals, policies, and all the structured, methodical writing that comes with a life in security engineering. But recently, I wanted to see if I could do something different — something creative. So, I decided to write my first fantasy novel.</p>

<p>That’s when I discovered that writing creatively brings its own set of technical frustrations.</p>

<hr />

<h2 id="the-search-for-the-right-writing-app">The Search for the Right Writing App</h2>

<p>Like any good techy, I started by defining my acceptance criteria and then testing tools to see what fit best.</p>

<h3 id="acceptance-criteria">Acceptance criteria</h3>

<ul>
  <li>can edit same story from laptop and ipad with similar workflow and experiance</li>
  <li>can sync without a third party service</li>
  <li>supports editing workflows</li>
  <li>supports tagging and organizational tools</li>
  <li>supports LLM via built in tools or MCP server</li>
</ul>

<p>At first this seemed like an easy answer. Just use Google Docs and treat this like a long form project from work. It already meets all of my acceptence criteria, right? I even ended up writing the first half of the book in Google Docs, mostly because it was familiar and accessible from anywhere. But when it came time to edit and reorganize scenes, the experience quickly became painful.</p>

<p>So began my googling odyssey through writing software:</p>

<ul>
  <li>Tried Scrivener — powerful, but the only supported way to sync is via dropbox.</li>
  <li>Moved to Obsidian — great for notes, mindmaping, and searching, but not ideal for mobile writing.</li>
  <li>Then VS Code — did everything I wanted except easy syncing to my ipad.</li>
  <li>Finally landed on Ulysses, and it met all my criteria except LLM support.</li>
</ul>

<p>Ulysses offered a simple writing workflow and feature set that I liked and that worked across my iPad, phone, and computer seamlessly. Big props to the Ulysses team for building an environment that made creative writing easier for me. But it was not perfect…yet.</p>

<hr />

<h2 id="the-pain-point-manual-tagging-and-keywords">The Pain Point: Manual Tagging and Keywords</h2>

<p>As much as I enjoyed writing in Ulysses, managing metadata (tags, keywords, etc.) quickly became tedious and took too many clicks to do at scale. It was fine when writing, but going back to review, revise, and catigorize across the novel took me forever the first time doing it manually.</p>

<p>When working on the novel, I often break things down into scenes or chapters. It let’s me ask for reviews and feedback in more target areas. Also, being able to tag them — by character, location, timeline, or theme — is crucial when revising or tracking consistency.</p>

<p>Doing that manually? Not fun.</p>

<p>That’s when I thought:</p>
<blockquote>
  <p><em>“Why not automate this with an MCP server and a local LLM?”</em></p>
</blockquote>

<hr />

<h2 id="the-idea-using-an-mcp-server-to-automate-metadata">The Idea: Using an MCP Server to Automate Metadata</h2>

<p>My vision was simple:</p>

<ol>
  <li>Use an MCP server to connect a LLM like anthropic or openAI or a local LLM (like Ollama or LM Studio).</li>
  <li>Have the model analyze my writing, suggest keywords or tags for each chapter.</li>
  <li>After I review and approve them, automatically update those tags back into Ulysses so everything syncs across my devices.</li>
</ol>

<p>One problem my making this dream a reality though…</p>
<blockquote>
  <p>Ulysses doesn’t have an MCP server.</p>
</blockquote>

<hr />

<h2 id="the-challenge-ulysses-has-no-public-api">The Challenge: Ulysses Has No Public API</h2>

<p>I dove into <a href="https://ulysses.app/kb/" rel="noopener noreferrer">Ulysses’ official documentation</a> to see what integration options existed. Unfortunately, there’s no traditional API. Instead, Ulysses uses a local app-based integration model.</p>

<p>So, I reached out to Ulysses support, explained what I was building, and submitted a few feature requests.</p>

<p>To their credit, the Ulysses support team was fantastic — responsive, friendly, and genuinely interested in what I was trying to do. They suggested creating a local middleware app to handle communication between my MCP server and Ulysses.</p>

<hr />

<h2 id="the-solution-ulysses-mcp">The Solution: Ulysses-MCP</h2>

<p>That’s when I started building <a href="https://github.com/sonofagl1tch/ulysses-mcp" rel="noopener noreferrer">ulysses-mcp</a>.</p>

<p>The project evolved into a middleware layer that allows Ulysses to communicate with a local MCP server, enabling intelligent local analysis of my writing without sending anything to the cloud.</p>

<p>Now, I can ask questions like:</p>

<ul>
  <li>“Which scenes does Character XYZ appear in?”</li>
  <li>“Where did I last mention the city of blahblah?”</li>
  <li>“Are there any inconsistent spellings of this character’s name?”</li>
</ul>

<p>And my local LLM answers directly — privately, securely, and in near real time.</p>

<hr />

<h2 id="what-it-looks-like">What It Looks Like</h2>

<p><img src="/assets/images/2025-10-30-building-ulysses-mcp-from-frustration-to-a-smarter-writing-workflow/ulysses-mcp-manuscript-view.png" alt="Ulysses manuscript with keywords" /><br />
<em>Ulysses manuscript view showing how chapters/scenes are structured with the Keywords section visible, helping visualize the tagging workflow</em></p>

<p><img src="/assets/images/2025-10-30-building-ulysses-mcp-from-frustration-to-a-smarter-writing-workflow/MCP-server-running.png" alt="MCP server running" /><br />
<em>The ulysses-mcp server running locally, ready to process requests and interact with Ulysses</em></p>

<p><img src="/assets/images/2025-10-30-building-ulysses-mcp-from-frustration-to-a-smarter-writing-workflow/MCP-requesting-access.png" alt="MCP requesting access" /><br />
<em>Authorization request dialog showing the MCP server requesting access to your Ulysses library</em></p>

<p><img src="/assets/images/2025-10-30-building-ulysses-mcp-from-frustration-to-a-smarter-writing-workflow/MCP-howmanycharacters-authorize.png" alt="MCP authorization for character query" /><br />
<em>Authorization prompt when the MCP server needs access to query character information from your manuscript</em></p>

<p><img src="/assets/images/2025-10-30-building-ulysses-mcp-from-frustration-to-a-smarter-writing-workflow/MCP-howmanycharacters-prompt.png" alt="Querying character count" /><br />
<em>Example prompt asking the local LLM to analyze how many characters appear in the manuscript</em></p>

<p><img src="/assets/images/2025-10-30-building-ulysses-mcp-from-frustration-to-a-smarter-writing-workflow/MCP-howmanycharacters-results.png" alt="Character query results" /><br />
<em>The LLM’s response showing detailed analysis of characters found throughout the manuscript</em></p>

<p><img src="/assets/images/2025-10-30-building-ulysses-mcp-from-frustration-to-a-smarter-writing-workflow/MCP-addkeyword-prompt.png" alt="Adding keywords prompt" /><br />
<em>Requesting the MCP server to add keywords to specific chapters or scenes in Ulysses</em></p>

<p><img src="/assets/images/2025-10-30-building-ulysses-mcp-from-frustration-to-a-smarter-writing-workflow/MCP-addkeyword-results.png" alt="Keywords added successfully" /><br />
<em>Confirmation that keywords have been successfully added to the novel through the MCP integration</em></p>

<hr />

<h2 id="the-result">The Result</h2>

<p>The newest version of <a href="https://github.com/sonofagl1tch/ulysses-mcp" rel="noopener noreferrer">ulysses-mcp</a> now:</p>

<ul>
  <li>Builds the local middleware app required by Ulysses.</li>
  <li>Enables communication with a local MCP server.</li>
  <li>Keeps everything private and local — no data leaves your machine.</li>
</ul>

<p>It’s been a game-changer for my writing workflow. I’ve caught scenes where I accidentally used the wrong character, spotted repeated phrases, and maintained better consistency across my novel — all while keeping my work offline.</p>

<hr />

<h2 id="whats-next">What’s Next</h2>

<p>I’m continuing to refine the project, add better metadata parsing, and explore deeper integrations. I’d also love to see Ulysses eventually support native MCP or local LLM features directly.</p>

<p>If you’re curious or want to contribute, check it out here:<br />
👉 <a href="https://github.com/sonofagl1tch/ulysses-mcp" rel="noopener noreferrer"><strong>https://github.com/sonofagl1tch/ulysses-mcp</strong></a></p>

<p>And if you’re like me — a technical style writer venturing into creative writing — maybe this project will make your journey a little smoother.</p>

<hr />

<p><em>Because sometimes, the best way to fix your writing workflow… is to build your own tools.</em></p>]]></content><author><name></name></author><category term="mcp" /><category term="ai" /><category term="writing" /><category term="workflow" /><summary type="html"><![CDATA[Building Ulysses-MCP - From Frustration to a Smarter Writing Workflow]]></summary></entry><entry><title type="html">Welcome to PEBCAK Consulting LLC</title><link href="https://pebcak-consulting-llc.github.io/consulting/business/2025/08/05/welcome-to-pebcak-consulting.html" rel="alternate" type="text/html" title="Welcome to PEBCAK Consulting LLC" /><published>2025-08-05T17:00:00+00:00</published><updated>2025-08-05T17:00:00+00:00</updated><id>https://pebcak-consulting-llc.github.io/consulting/business/2025/08/05/welcome-to-pebcak-consulting</id><content type="html" xml:base="https://pebcak-consulting-llc.github.io/consulting/business/2025/08/05/welcome-to-pebcak-consulting.html"><![CDATA[<p>Welcome to the PEBCAK Consulting LLC blog!</p>

<p>This is where we’ll share:</p>

<ul>
  <li>Technical insights</li>
  <li>Consulting experiences</li>
  <li>Industry best practices</li>
  <li>Problem-solving approaches</li>
</ul>

<p>Stay tuned for more content!</p>]]></content><author><name></name></author><category term="consulting" /><category term="business" /><summary type="html"><![CDATA[Welcome to the PEBCAK Consulting LLC blog!]]></summary></entry><entry><title type="html">Building AWS Detective: Lessons from the Field</title><link href="https://pebcak-consulting-llc.github.io/aws/cloud-security/detective/2024/01/03/aws-detective-insights.html" rel="alternate" type="text/html" title="Building AWS Detective: Lessons from the Field" /><published>2024-01-03T17:00:00+00:00</published><updated>2024-01-03T17:00:00+00:00</updated><id>https://pebcak-consulting-llc.github.io/aws/cloud-security/detective/2024/01/03/aws-detective-insights</id><content type="html" xml:base="https://pebcak-consulting-llc.github.io/aws/cloud-security/detective/2024/01/03/aws-detective-insights.html"><![CDATA[<p>As co-author of AWS Detective, I’ve had the unique opportunity to bridge the gap between traditional threat hunting and cloud-native security investigation. Here are some key insights from that journey.</p>

<h2 id="from-concept-to-service">From Concept to Service</h2>

<p>AWS Detective emerged from real-world needs I encountered while working with security teams struggling to investigate incidents in cloud environments. Traditional tools weren’t designed for the scale and complexity of modern cloud infrastructures.</p>

<h2 id="key-challenges-we-solved">Key Challenges We Solved</h2>

<h3 id="1-data-correlation-at-scale">1. Data Correlation at Scale</h3>
<p>Cloud environments generate massive amounts of security data. Detective helps analysts quickly identify relationships between:</p>
<ul>
  <li>VPC Flow Logs</li>
  <li>DNS logs</li>
  <li>CloudTrail events</li>
  <li>GuardDuty findings</li>
</ul>

<h3 id="2-visual-investigation">2. Visual Investigation</h3>
<p>Drawing from my presentation experience on “Threat Hunting with Visualization,” we built intuitive visual interfaces that help analysts understand complex attack patterns.</p>

<h3 id="3-time-based-analysis">3. Time-Based Analysis</h3>
<p>One lesson from my Carbon Black days: time context is crucial. Detective’s timeline views help analysts understand the sequence of events during an incident.</p>

<h2 id="real-world-applications">Real-World Applications</h2>

<p>Based on my speaking engagements and consulting work, common use cases include:</p>
<ul>
  <li><strong>Lateral Movement Detection</strong> - Identifying unusual access patterns across AWS resources</li>
  <li><strong>Insider Threat Investigation</strong> - Analyzing user behavior anomalies</li>
  <li><strong>Compromise Assessment</strong> - Understanding the full scope of security incidents</li>
</ul>

<h2 id="best-practices-for-cloud-investigation">Best Practices for Cloud Investigation</h2>

<p>From my SANS presentations and field experience:</p>

<ol>
  <li><strong>Start with high-fidelity alerts</strong> - Use GuardDuty findings as investigation starting points</li>
  <li><strong>Follow the data flow</strong> - Understand how data moves through your cloud architecture</li>
  <li><strong>Leverage automation</strong> - Use APIs to scale your investigation capabilities</li>
</ol>

<h2 id="looking-forward">Looking Forward</h2>

<p>The cloud security landscape continues to evolve. My recent work on vulnerability disclosure and security testing (featured on “Screaming in the Cloud” podcast) shows there’s still much work to be done.</p>

<hr />

<p><em>Interested in cloud security investigation techniques? I regularly speak on these topics - <a href="mailto:sonofagl1tch@pebcakconsulting.com">contact me</a> for speaking opportunities.</em></p>]]></content><author><name></name></author><category term="aws" /><category term="cloud-security" /><category term="detective" /><summary type="html"><![CDATA[As co-author of AWS Detective, I’ve had the unique opportunity to bridge the gap between traditional threat hunting and cloud-native security investigation. Here are some key insights from that journey.]]></summary></entry><entry><title type="html">Threat Hunting: From Endpoint to Cloud</title><link href="https://pebcak-consulting-llc.github.io/threat-hunting/cybersecurity/cloud/2024/01/02/threat-hunting-expertise.html" rel="alternate" type="text/html" title="Threat Hunting: From Endpoint to Cloud" /><published>2024-01-02T17:00:00+00:00</published><updated>2024-01-02T17:00:00+00:00</updated><id>https://pebcak-consulting-llc.github.io/threat-hunting/cybersecurity/cloud/2024/01/02/threat-hunting-expertise</id><content type="html" xml:base="https://pebcak-consulting-llc.github.io/threat-hunting/cybersecurity/cloud/2024/01/02/threat-hunting-expertise.html"><![CDATA[<p>Over the past decade, I’ve had the privilege of working across the threat hunting landscape - from endpoint security at Carbon Black to cloud security at AWS. Here’s what I’ve learned about the evolution of threat hunting.</p>

<h2 id="the-journey">The Journey</h2>

<p>My threat hunting journey began in traditional endpoint security, where we focused on:</p>
<ul>
  <li>Behavioral analysis of malware</li>
  <li>Lateral movement detection</li>
  <li>Ransomware investigation techniques</li>
</ul>

<h2 id="key-publications--research">Key Publications &amp; Research</h2>

<p>Some highlights from my research and writing:</p>

<h3 id="co-authored-huntpedia">Co-Authored Huntpedia</h3>
<p>The <a href="https://www.threathunting.net/files/huntpedia.pdf" rel="noopener noreferrer">Huntpedia</a> serves as a comprehensive guide for threat hunters, covering methodologies and best practices I’ve developed over years of hands-on experience.</p>

<h3 id="carbon-black-blog-series">Carbon Black Blog Series</h3>
<p>During my time at Carbon Black, I authored numerous articles on:</p>
<ul>
  <li>Ransomware analysis and mitigation</li>
  <li>Point-of-sale malware investigations</li>
  <li>Bitcoin mining malware detection</li>
  <li>SSL/TLS security considerations</li>
</ul>

<h2 id="speaking-at-scale">Speaking at Scale</h2>

<p>From local meetups to international conferences like DerbyCon and SANS summits, I’ve shared insights on:</p>
<ul>
  <li><strong>Lateral Movement Detection</strong> - My DerbyCon 2017 presentation on hunting for lateral movement</li>
  <li><strong>Cloud Threat Hunting</strong> - Adapting traditional hunting techniques for cloud environments</li>
  <li><strong>Security Testing</strong> - “Doing Bad Things for Good Reasons” at SANS CloudSecNext</li>
</ul>

<h2 id="the-cloud-evolution">The Cloud Evolution</h2>

<p>Moving to AWS has opened new frontiers in threat hunting:</p>
<ul>
  <li>Cloud-native detection techniques</li>
  <li>Serverless security considerations</li>
  <li>API-driven security automation</li>
</ul>

<h2 id="whats-next">What’s Next</h2>

<p>The field continues to evolve with AI/ML integration and cloud-first architectures. Stay tuned for more insights on these emerging areas.</p>

<hr />

<p><em>Want to discuss threat hunting strategies? <a href="mailto:sonofagl1tch@pebcakconsulting.com">Reach out</a> - I’m always happy to share knowledge with fellow security practitioners.</em></p>]]></content><author><name></name></author><category term="threat-hunting" /><category term="cybersecurity" /><category term="cloud" /><summary type="html"><![CDATA[Over the past decade, I’ve had the privilege of working across the threat hunting landscape - from endpoint security at Carbon Black to cloud security at AWS. Here’s what I’ve learned about the evolution of threat hunting.]]></summary></entry><entry><title type="html">Beyond the Perimeter Podcast - Turning a Hobby Into a Career</title><link href="https://pebcak-consulting-llc.github.io/podcast/career-development/cybersecurity/2020/06/15/beyond-perimeter-podcast.html" rel="alternate" type="text/html" title="Beyond the Perimeter Podcast - Turning a Hobby Into a Career" /><published>2020-06-15T17:00:00+00:00</published><updated>2020-06-15T17:00:00+00:00</updated><id>https://pebcak-consulting-llc.github.io/podcast/career-development/cybersecurity/2020/06/15/beyond-perimeter-podcast</id><content type="html" xml:base="https://pebcak-consulting-llc.github.io/podcast/career-development/cybersecurity/2020/06/15/beyond-perimeter-podcast.html"><![CDATA[<p>Featured interview discussing my journey from cybersecurity hobbyist to industry professional, sharing insights on career development in the security field.</p>

<p><a href="/assets/pdfs/BeyondThePerimeterPodcast-Episode01-TurningaHobbyIntoACareer.pdf">Listen to the podcast (PDF transcript)</a></p>

<p><strong>Perimeter81 Beyond the Perimeter Podcast - Episode 01</strong></p>]]></content><author><name></name></author><category term="podcast" /><category term="career-development" /><category term="cybersecurity" /><summary type="html"><![CDATA[Featured interview discussing my journey from cybersecurity hobbyist to industry professional, sharing insights on career development in the security field.]]></summary></entry><entry><title type="html">5 Objectives for Establishing an API-First Security Strategy</title><link href="https://pebcak-consulting-llc.github.io/api-security/strategy/dark-reading/2018/01/10/api-first-security-strategy.html" rel="alternate" type="text/html" title="5 Objectives for Establishing an API-First Security Strategy" /><published>2018-01-10T17:00:00+00:00</published><updated>2018-01-10T17:00:00+00:00</updated><id>https://pebcak-consulting-llc.github.io/api-security/strategy/dark-reading/2018/01/10/api-first-security-strategy</id><content type="html" xml:base="https://pebcak-consulting-llc.github.io/api-security/strategy/dark-reading/2018/01/10/api-first-security-strategy.html"><![CDATA[<p>Essential objectives for organizations looking to implement an API-first approach to security. A strategic framework for modern security architectures.</p>

<p><a href="/assets/pdfs/Dark Reading - 5 Objectives for Establishing an API-First Security Strategy.pdf">Read the full article (PDF)</a></p>

<p><strong>Originally published on Dark Reading</strong></p>]]></content><author><name></name></author><category term="api-security" /><category term="strategy" /><category term="dark-reading" /><summary type="html"><![CDATA[Essential objectives for organizations looking to implement an API-first approach to security. A strategic framework for modern security architectures.]]></summary></entry><entry><title type="html">Top 3 Takeaways From DerbyCon</title><link href="https://pebcak-consulting-llc.github.io/derbycon/conference/security-community/sqrrl/2017/10/15/derbycon-takeaways.html" rel="alternate" type="text/html" title="Top 3 Takeaways From DerbyCon" /><published>2017-10-15T17:00:00+00:00</published><updated>2017-10-15T17:00:00+00:00</updated><id>https://pebcak-consulting-llc.github.io/derbycon/conference/security-community/sqrrl/2017/10/15/derbycon-takeaways</id><content type="html" xml:base="https://pebcak-consulting-llc.github.io/derbycon/conference/security-community/sqrrl/2017/10/15/derbycon-takeaways.html"><![CDATA[<p>Key insights and lessons learned from DerbyCon, one of the premier hacker conferences.</p>

<p><a href="/assets/pdfs/Top 3 Takeaways From DerbyCon - Sqrrl.pdf">Read the full article (PDF)</a></p>

<p><strong>Originally published on Sqrrl Blog</strong></p>]]></content><author><name></name></author><category term="derbycon" /><category term="conference" /><category term="security-community" /><category term="sqrrl" /><summary type="html"><![CDATA[Key insights and lessons learned from DerbyCon, one of the premier hacker conferences.]]></summary></entry><entry><title type="html">Threat Hunter Profile - Ryan Nolette</title><link href="https://pebcak-consulting-llc.github.io/threat-hunting/profile/interview/2017/09/20/threat-hunter-profile.html" rel="alternate" type="text/html" title="Threat Hunter Profile - Ryan Nolette" /><published>2017-09-20T17:00:00+00:00</published><updated>2017-09-20T17:00:00+00:00</updated><id>https://pebcak-consulting-llc.github.io/threat-hunting/profile/interview/2017/09/20/threat-hunter-profile</id><content type="html" xml:base="https://pebcak-consulting-llc.github.io/threat-hunting/profile/interview/2017/09/20/threat-hunter-profile.html"><![CDATA[<p>Featured threat hunter profile discussing my background, methodologies, and insights into the threat hunting profession.</p>

<p><a href="/assets/pdfs/Threat Hunter Profile - Ryan Nolette.pdf">Read the full profile (PDF)</a></p>]]></content><author><name></name></author><category term="threat-hunting" /><category term="profile" /><category term="interview" /><summary type="html"><![CDATA[Featured threat hunter profile discussing my background, methodologies, and insights into the threat hunting profession.]]></summary></entry><entry><title type="html">Endpoint and Network Hunting: A Q&amp;amp;A with Ryan Nolette</title><link href="https://pebcak-consulting-llc.github.io/threat-hunting/interview/endpoint-security/sqrrl/2017/08/15/endpoint-network-hunting-qa.html" rel="alternate" type="text/html" title="Endpoint and Network Hunting: A Q&amp;amp;A with Ryan Nolette" /><published>2017-08-15T17:00:00+00:00</published><updated>2017-08-15T17:00:00+00:00</updated><id>https://pebcak-consulting-llc.github.io/threat-hunting/interview/endpoint-security/sqrrl/2017/08/15/endpoint-network-hunting-qa</id><content type="html" xml:base="https://pebcak-consulting-llc.github.io/threat-hunting/interview/endpoint-security/sqrrl/2017/08/15/endpoint-network-hunting-qa.html"><![CDATA[<p>In-depth Q&amp;A session covering endpoint and network threat hunting methodologies, tools, and best practices.</p>

<p><a href="/assets/pdfs/Endpoint and Network Hunting_ A Q&amp;A with Ryan Nolette - Sqrrl.pdf">Read the full Q&amp;A (PDF)</a></p>

<p><strong>Originally published on Sqrrl Blog</strong></p>]]></content><author><name></name></author><category term="threat-hunting" /><category term="interview" /><category term="endpoint-security" /><category term="sqrrl" /><summary type="html"><![CDATA[In-depth Q&amp;A session covering endpoint and network threat hunting methodologies, tools, and best practices.]]></summary></entry><entry><title type="html">Situational-Awareness Driven Threat Hunting</title><link href="https://pebcak-consulting-llc.github.io/threat-hunting/situational-awareness/sqrrl/2017/07/15/situational-awareness-threat-hunting.html" rel="alternate" type="text/html" title="Situational-Awareness Driven Threat Hunting" /><published>2017-07-15T17:00:00+00:00</published><updated>2017-07-15T17:00:00+00:00</updated><id>https://pebcak-consulting-llc.github.io/threat-hunting/situational-awareness/sqrrl/2017/07/15/situational-awareness-threat-hunting</id><content type="html" xml:base="https://pebcak-consulting-llc.github.io/threat-hunting/situational-awareness/sqrrl/2017/07/15/situational-awareness-threat-hunting.html"><![CDATA[<p>Building effective threat hunting programs through enhanced situational awareness and environmental understanding.</p>

<p><a href="/assets/pdfs/Situational-Awareness driven Threat Hunting - Sqrrl.pdf">Read the full article (PDF)</a></p>

<p><strong>Originally published on Sqrrl Blog</strong></p>]]></content><author><name></name></author><category term="threat-hunting" /><category term="situational-awareness" /><category term="sqrrl" /><summary type="html"><![CDATA[Building effective threat hunting programs through enhanced situational awareness and environmental understanding.]]></summary></entry></feed>