London, UK >  Weekly writing on technology, business, and culture from a cyber security professional with a background in journalism – sceptical, but never cynical. Start here →
📓 Field Notes is my monthly newsletter with personal observations and ideas that don't make it to the blog. Subscribe →

Recent blog posts

Finding comfort in the green hills outside my window
Finding comfort in the green hills outside my window
 -  As I mentioned in a recent post, I moved to a new home a few months ago. My new place sits atop a hill, and the window to the right of my desk happens to look away from the city, over the tops of the houses opposite and off into the green hills be...
Fixing weak WiFi and slow speeds on my home network
Fixing weak WiFi and slow speeds on my home network
 -  I moved to a new home late last year, and immediately faced a whole range of connectivity issues. For a techie like myself, reliant on a functional network both for work and for fun, that was a big problem. So I implemented a few different solutio...
Endpoint detection and response (EDR) - setting the record straight
Endpoint detection and response (EDR) - setting the record straight
 -  When I went to bed on the evening of Friday 19th July, I couldn’t sleep. It was a stuffy summer’s night in London, and the adrenaline was still pumping through my veins after one of the more notable days in recent memory for cyber security. Still,...
Centralisation, repeatability, and automation in a modular SOC
Centralisation, repeatability, and automation in a modular SOC
 -  The dictionary definition of “modular” leaves a little to be desired: “Employing or involving a module or modules as the basis of design or construction.” What is implied, but that I would make explicit, is that parts of the whole can be swapped o...
Cyber security sometimes means learning things backwards
Cyber security sometimes means learning things backwards
 -  Stick around cyber security Twitter or LinkedIn for long enough and you’ll likely see somebody raise a question about how to get into the industry. You’ll also likely see a reply that describes a kind of rite of passage from sysadmin, to SOC analy...
Using winget to automate software deployment to a new laptop
Using winget to automate software deployment to a new laptop
 -  I got my first new laptop in six years this week! The new hardware is definitely exciting, but reviews aren’t really my thing, so while I’ll inevitably tweet about how the Microsoft Surface Laptop fares, that’s not the purpose of this post. This i...
2023: Thoughts on new challenges and sharing experiences
2023: Thoughts on new challenges and sharing experiences
 -  A belated happy new year! If you’re reading this, I hope you have a terrific 2023. I recently went back and read some old posts that have long since been deleted from this blog - writings from my journalism days that reminded me of my perspectives...
Investigating Explorer's temporary ZIP folders and retrieving files
Investigating Explorer's temporary ZIP folders and retrieving files
 -  If I was to describe how often malware is downloaded within ZIP archives, “common” would be a huge understatement. A key artefact in these investigations is the temporary directory Windows creates when a user opens an archive in Explorer, but I re...
Parsing login sessions from the Windows event log with PowerShell
Parsing login sessions from the Windows event log with PowerShell
 -  Faced with a day at home recovering from my most recent COVID-19 booster vaccine, I realised I hadn’t written anything more than a few lines of PowerShell in a while and decided to spend some time working on something interesting. The idea occurre...
Using Tkinter to build simple GUIs for Python apps
Using Tkinter to build simple GUIs for Python apps
 -  I’ve written many Python scripts and apps in the past, including my Windows backup utility Backutil, which is probably the my most complex project to date. But I’ve always designed these to run in the background or on the command line, and haven’t...
About MattCASmith About MattCASmith MattCASmith feed MattCASmith feed Email MattCASmith Email MattCASmith MattCASmith on X MattCASmith on X MattCASmith on Bluesky MattCASmith on Bluesky