Category: CTEM – Continuous Threat Exposure Management

Detection‑as‑Code (DaC) Adoption Rising — SOCs Embedding Detection Logic into CI/CD‑Style Pipelines

Shuvro

Reading Time: 3 minutesDetection‑as‑Code (DaC) is moving from niche practice to mainstream SOC engineering discipline. By embedding detection logic into CI/CD‑style pipelines, organizations are achieving faster deployment cycles, higher detection accuracy, and measurable reductions in false positives.

Exposure Management Is Converging — CSPM, KSPM, DSPM, and CTEM Frameworks Are Blending into Unified Risk Dashboards

Shuvro

Reading Time: 3 minutesFor years, security teams have relied on separate tools to manage cloud misconfigurations (CSPM), Kubernetes security (KSPM), and sensitive data exposure (DSPM). Meanwhile, Continuous Threat Exposure Management (CTEM) emerged as a programmatic approach to continuously identify, assess, and remediate exposures across the attack surface.

Build a Security Metrics Program to Drive Maturity

Shuvro

Reading Time: 3 minutesThis document provides a condensed blueprint for establishing a security metrics program focused on driving organizational maturity.

Wazuh, Beats, CheckMK, Open UBA, Open XDR, OpenCTI, Suricata, MISP, Snort, TheHive, Cortex, ELK, AlertAnalyst – and More Integration is Required…Does it Makes Sense?

Shuvro

Reading Time: 3 minutesThe decision to build a security platform from open-source components is conditional.

Auditor Became CISSP – Never Performed in Projects & in IS Development, Would You Hire Him for Your Infrastructure Platform Management? Can or Should that Knowledge Gap be Admissible?

Shuvro

Reading Time: 6 minutesStatus: Final Blueprint (Summary) Author: Shahab Al Yamin Chawdhury Organization: Principal Architect & Consultant Group Research Date: June 1, 2024 Location: Dhaka, Bangladesh Version: 1.0 1. The Core Dilemma: Assessor vs. Builder Mindset We are observing worldwide adoption on CISSP Read More …

Data Collection Methods for CTI (Cyber Threat Intelligence)

Shuvro

Reading Time: 3 minutesAuthor: Shahab Al Yamin Chawdhury Date: March 4, 2024 Version: 1.0 Executive Summary This blueprint provides a strategic methodology for designing and operationalizing a world-class Cyber Threat Intelligence (CTI) data collection program. It moves beyond simply listing sources to establish Read More …

How to Build Threat Hunting in Your Security Operations – Summary

Shuvro

Reading Time: 3 minutesStatus: Final Blueprint (Summary) Author: Shahab Al Yamin Chawdhury Organization: Principal Architect & Consultant Group Research Date: July 23, 2025 Location: Dhaka, Bangladesh Version: 1.0 1. The Proactive Imperative In the modern threat landscape, organizations must operate under the assumption Read More …

Why You Need Both CASB & A WAF Even Though You Have A DDoS Appliance

Shuvro

Reading Time: 4 minutesStatus: Final Blueprint (Summary) Author: Shahab Al Yamin Chawdhury Version: 1.0 1. Executive Summary: The Illusion of a Single Defense In the modern digital landscape, relying solely on a Distributed Denial-of-Service (DDoS) appliance creates a dangerous false sense of security. Read More …

CTEM – Continuous Threat Exposure Management in the Enterprise

Shuvro

Reading Time: 4 minutesStatus: Final Blueprint Author: Shahab Al Yamin Chawdhury Organization: Principal Architect & Consultant Group Research Date: July 23, 2025 Location: Dhaka, Bangladesh Version: 1.0 Executive Summary Continuous Threat Exposure Management (CTEM) marks a strategic evolution from reactive, incident-driven security to Read More …