nomostatic.app
Separating Signal from Noise
a collection of writings, thoughts, ideas, and ramblings on things I find interesting
Latest
-
The Missing Span: Designing Observability That Can Tell Causes Apart
Disclosure: The author is employed by Cisco, which owns Splunk. This article was written in a personal capacity, was not reviewed by Cisco or Splunk, and does not…
-
Your IPS Needs to See Inside HTTPS – Part 2 (SnortML)
THE ESSENTIAL ARGUMENT≈ 4 MIN READ What did SnortML actually see? Our earlier PHP2Shell mitigation analysis raised a basic question: can an intrusion policy inspect an exploit when…
-
Lab Guide for Snort Inspection Through TLS Resign Decryption
Read the techtorial here…. to get the background on why we decrypt. THE LAB AT A GLANCEREAD BEFORE CONFIGURING Before you configure the lab This workflow applies to…
-
Your IPS needs to see inside your HTTPS!!!
THE ESSENTIAL ARGUMENT≈ 3 MIN READ Before the deep dive Our PHP2Shell mitigation article[1] raised a practical question: what does an intrusion policy actually protect when the application…
-
Reducing PHP2Shell Risk Before Patching
NOMOSTATIC · CYBERSECURITY & TRUST · Analysis dated October 21, 2026 Cisco-first interim defenses for CVE-2026-109618 and CVE-2026-109619 The three-minute briefing Treat PHP2Shell as an emergency change: identify…
-
EAP-TLS with Cisco Access Manager: An Entra-Aware Policy You Can Verify
THE ESSENTIAL ARGUMENT≈ 3 MIN READ Before the deep dive An endpoint completes EAP-TLS and the authentication result is successful. But that result alone doesn’t establish whether the…
-
Windows 802.1X SSO Failures After October 2026: Diagnose Before Changing Cisco ISE
TECHTORIAL 01 · 3-MINUTE BRIEFING When 802.1X breaks, establish which layer changed A Windows client loses enterprise Wi-Fi access after the October 13, 2026 security update. Cisco ISE…
-
The Trust Behind Zero Trust: Critical Architecture Dependencies
THE ESSENTIAL ARGUMENT ≈ 3 MIN READ Before the deep dive A help-desk technician restores access for someone who has replaced their phone. The ticket looks routine. But…
