Threat intel, DFIR
and security notes
Deep-dives, investigation write-ups, tooling notes and transparent product updates from the Mlab team. Written for analysts who want the indicators, the method and the fix.
#eu
Newest first
NIS2 vs DORA vs GDPR: Untangling EU Cybersecurity Regulation
Three EU regulations, three different scopes, one confused compliance team. A clear map of who each one covers, where they overlap, and what to fix first.
Why EU Data Hosting Matters for Security Tooling
Your IOCs and telemetry contain personal data. Sending them to a US cloud service is a data transfer with legal strings attached. Here is what that means for your tooling choices.
DORA Explained for Security Teams: What Changes in Practice
The EU Digital Operational Resilience Act translated into engineering terms: who is in scope, what incident reporting really requires, TLPT, and why your vendor register just became a regulated artifact.
A 421M decision model in front of our MCP output? Not yet
Studies, benchmarks and build notes. Method first, numbers included, losses too.
Read the latest note