Threat intel, DFIR
and security notes
Deep-dives, investigation write-ups, tooling notes and transparent product updates from the mlab team. Written for analysts who want the indicators, the method and the fix.
#gdpr
Newest first
Your Organisation Is in a Data Breach: A France and EU Response Guide
Your data just showed up in a leak, or you just found an intruder. The GDPR clock is already running. A practical walkthrough of Articles 33 and 34, the CNIL notification, evidence, communication, credential resets and the French support ecosystem.
NIS2 vs DORA vs GDPR: Untangling EU Cybersecurity Regulation
Three EU regulations, three different scopes, one confused compliance team. A clear map of who each one covers, where they overlap, and what to fix first.
WHOIS Is Dead, Long Live WHOIS: Investigating Domains After GDPR
GDPR redacted the registrant fields investigators relied on for decades. Domain attribution still works, but the pivots have moved: RDAP, name servers, certificates, and history.
Why EU Data Hosting Matters for Security Tooling
Your IOCs and telemetry contain personal data. Sending them to a US cloud service is a data transfer with legal strings attached. Here is what that means for your tooling choices.
inkdex: an index that states facts, a scanner that judges them
Studies, benchmarks and build notes. Method first, numbers included, losses too.
Read the latest note