Threat intel, DFIR
and security notes
Deep-dives, investigation write-ups, tooling notes and transparent product updates from the Mlab team. Written for analysts who want the indicators, the method and the fix.
#dora
Newest first
NIS2 vs DORA vs GDPR: Untangling EU Cybersecurity Regulation
Three EU regulations, three different scopes, one confused compliance team. A clear map of who each one covers, where they overlap, and what to fix first.
Third-Party Risk Management Without the Spreadsheet Nightmare
Vendor questionnaires are point-in-time, self-reported, and unread. Here is why the spreadsheet model of TPRM fails, what continuous vendor risk management looks like, and how DORA forces the issue.
DORA Explained for Security Teams: What Changes in Practice
The EU Digital Operational Resilience Act translated into engineering terms: who is in scope, what incident reporting really requires, TLPT, and why your vendor register just became a regulated artifact.
A 421M decision model in front of our MCP output? Not yet
Studies, benchmarks and build notes. Method first, numbers included, losses too.
Read the latest note