Collection Expert
The Expert Collection is a set of guides summarising the essential knowledge of each subject.
PDF guides, free to download, no account needed.
Active Directory Certificate Services
This guide describes how digital certificates operate within an Active Directory environment, covering cryptographic principles, the architecture of a Microsoft AD CS PKI, issuance, validation, renewal, revocation, application usage, security, and operations. It is based on a two-tier enterprise architecture: an offline root authority and one or more issuing authorities integrated into Active Directory.
DevSecOps
This guide explains how to integrate security at every stage of software delivery: from IDE to production, with architecture and flow diagrams, tool choices, performance impact, prerequisites, roadmap and example ready-to-adapt pipelines. DevSecOps integrates security into every step of the software delivery cycle, instead of treating it as a final check before going into production. Security becomes a property of the pipeline: automated, measured and shared between developers, operations and the security team.
Comparison of PAM solutions
Idira (CyberArk), BeyondTrust, Delinea Secret Server, KeeperPAM, Netwrix Privilege Secure, and Teleport — models, functions, ratings, and selection based on context.
Microsoft logs
Active Directory . Entra ID . Microsoft 365 Which logs for what—sources, fields, retention, KQL, investigation playbooks, and collection architecture.
Securing Microsoft Entra ID and Microsoft 365 - The CISO's Guide
It answers a different question — the one I have been asked in executive committees across ten years of identity audit and architecture engagements: where do we actually stand, what exposes us, and in what order should we fix it?
Free, open download. No account, no sign-up.