Research
MITRE ATT&CK sub-techniques vs procedures: what is the difference?
Sub-techniques categorize behavior. Procedures record how a real actor did it. See the difference with a PowerShell example and how to use each.
Oct 18, 20264 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedResearch
What is the MITRE ATT&CK matrix and how do you use it?
The ATT&CK matrix organizes real adversary behavior into tactics and techniques. Learn to read it and use it for detection gaps, exercises and reports.
Oct 18, 20264 min read
Research
MITRE ATT&CK for Enterprise, Mobile and ICS: which matrix to use?
ATT&CK has three technology domains: Enterprise, Mobile and ICS. Pick the one that matches the systems you defend, then map detections to its techniques.
Oct 18, 20264 min read
Research
What does managed detection and response (MDR) actually cover?
MDR means an outside team watches your telemetry and helps respond to threats. Scope varies, so settle who can act, on what, and how fast before you sign.
Oct 18, 20264 min read
Research
What is managed detection and response, and what should you define first?
Managed detection and response outsources threat monitoring and response. NIST SP 800-61 Rev. 3 says what to settle: authority to act, access and handoffs.
Oct 18, 20265 min read
Research
Malware vs exploits: what is the difference?
An exploit abuses a flaw to gain access. Malware is the malicious software that runs once an attacker is in. They often pair up, but defenses differ.
Oct 18, 20264 min read
Research
How do you manage Kubernetes across multiple clouds safely?
Running Kubernetes on more than one cloud multiplies kubeconfigs, roles and drift. Here is a short, practical way to keep access and policy consistent.
Oct 18, 20264 min read
Research
How do you make Apache Kafka fault tolerant without losing messages?
Kafka survives broker loss when replication factor, min.insync.replicas and producer acks agree. Here is the three part setting that Kafka docs suggest.
Oct 18, 20264 min read
Research
What is the impact of IT/OT convergence on security?
IT/OT convergence exposes physical processes to internet-era threats. See what changes, why patching differs and which controls NIST and CISA point to.
Oct 18, 20264 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.