41554 blogs · [ { "id": "01a0875f-8fd2-70be-9c3b-f80e89a93d84", "title": "My Favorite Books of 2025", "url": "https://chrissanders.org/2025/12/my-favorite-books-of-2025/?utm_source=rss&utm_medium=rss&utm_campaign=my-favorite-books-of-2025", "published_at": "2025-12-17T15:11:07+00:00" }, { "id": "01a0875f-8fd2-70be-9c3b-f80e8a45b3e4", "title": "Milo and the Midnight Meteorite: A Children’s Book", "url": "https://chrissanders.org/2025/08/milo-and-the-midnight-meteorite-a-childrens-book/?utm_source=rss&utm_medium=rss&utm_campaign=milo-and-the-midnight-meteorite-a-childrens-book", "published_at": "2025-08-25T21:43:20+00:00" }, { "id": "01a0875f-8fd2-70be-9c3b-f80e8a76ab5f", "title": "A Standard for Human-Centered Investigation Playbooks", "url": "https://chrissanders.org/2025/06/human-centered-playbooks/?utm_source=rss&utm_medium=rss&utm_campaign=human-centered-playbooks", "published_at": "2025-06-25T18:47:35+00:00" }, { "id": "01a0875f-8fd2-70be-9c3b-f80e8abeb9ad", "title": "My Favorite Books of 2024", "url": "https://chrissanders.org/2025/01/my-favorite-books-of-2024/?utm_source=rss&utm_medium=rss&utm_campaign=my-favorite-books-of-2024", "published_at": "2025-01-10T15:44:45+00:00" }, { "id": "01a0875f-8fd2-70be-9c3b-f80e8aebb6cd", "title": "My Favorite Books of 2023", "url": "https://chrissanders.org/2024/01/favorite-books-of-2023/?utm_source=rss&utm_medium=rss&utm_campaign=favorite-books-of-2023", "published_at": "2024-01-24T14:00:00+00:00" }, { "id": "01a0875f-8fd2-70be-9c3b-f80e8af63892", "title": "My Favorite Books of 2022", "url": "https://chrissanders.org/2023/01/favorite-books-2022/?utm_source=rss&utm_medium=rss&utm_campaign=favorite-books-2022", "published_at": "2023-01-11T14:30:00+00:00" }, { "id": "01a0875f-8fd2-70be-9c3b-f80e8bc2e42d", "title": "Win My 2022 Golden Ticket for Free Training", "url": "https://chrissanders.org/2022/12/goldenticket22/?utm_source=rss&utm_medium=rss&utm_campaign=goldenticket22", "published_at": "2022-12-06T15:00:00+00:00" }, { "id": "01a0875f-8fd2-70be-9c3b-f80e8bd753b7", "title": "2022 Holiday Training Sale", "url": "https://chrissanders.org/2022/11/2022-holiday-training-sale/?utm_source=rss&utm_medium=rss&utm_campaign=2022-holiday-training-sale", "published_at": "2022-11-25T14:53:02+00:00" }, { "id": "01a0875f-8fd2-70be-9c3b-f80e8c5048a0", "title": "My Favorite Books of 2021", "url": "https://chrissanders.org/2021/12/favorite-books-2021/?utm_source=rss&utm_medium=rss&utm_campaign=favorite-books-2021", "published_at": "2021-12-20T13:53:24+00:00" }, { "id": "01a0875f-8fd2-70be-9c3b-f80e8c826972", "title": "A Cognitive Skills Assessment of Digital Forensic Analysts – My Doctoral Dissertation", "url": "https://chrissanders.org/2021/12/dissertation/?utm_source=rss&utm_medium=rss&utm_campaign=dissertation", "published_at": "2021-12-09T15:05:31+00:00" }, { "id": "01a0c502-0ea1-731d-a3da-0f2d67910a27", "title": "Win My Golden Ticket!", "url": "https://chrissanders.org/2021/12/goldenticket2021/?utm_source=rss&utm_medium=rss&utm_campaign=goldenticket2021", "published_at": "2021-12-06T14:29:29+00:00" }, { "id": "01a0c502-0ea1-731d-a3da-0f2d67ed571b", "title": "Building Intrusion Detection Honeypots Online Course", "url": "https://chrissanders.org/2021/04/idh-course/?utm_source=rss&utm_medium=rss&utm_campaign=idh-course", "published_at": "2021-04-27T14:05:00+00:00" }, { "id": "01a0c502-0ea1-731d-a3da-0f2d6832f6ad", "title": "Come Join Me at AND", "url": "https://chrissanders.org/2021/01/join-me-at-and/?utm_source=rss&utm_medium=rss&utm_campaign=join-me-at-and", "published_at": "2021-01-22T15:17:49+00:00" }, { "id": "01a0c502-0ea1-731d-a3da-0f2d6833df0b", "title": "My Favorite Books of 2020", "url": "https://chrissanders.org/2020/12/favorite-books-2020/?utm_source=rss&utm_medium=rss&utm_campaign=favorite-books-2020", "published_at": "2020-12-03T18:31:34+00:00" }, { "id": "01a0c502-0ea1-731d-a3da-0f2d68d2234e", "title": "New Book: Intrusion Detection Honeypots", "url": "https://chrissanders.org/2020/09/idh-release/?utm_source=rss&utm_medium=rss&utm_campaign=idh-release", "published_at": "2020-09-01T13:50:52+00:00" }, { "id": "01a0c502-0ea1-731d-a3da-0f2d6928d55d", "title": "A Socratic Outline for Discussing the OST Release Debate", "url": "https://chrissanders.org/2020/07/socratic-ost/?utm_source=rss&utm_medium=rss&utm_campaign=socratic-ost", "published_at": "2020-07-21T14:31:57+00:00" }, { "id": "01a0c502-0ea1-731d-a3da-0f2d69571c01", "title": "The Call for Applied Research on Offensive Security Tool Release", "url": "https://chrissanders.org/2020/07/research-ost-release/?utm_source=rss&utm_medium=rss&utm_campaign=research-ost-release", "published_at": "2020-07-21T14:26:39+00:00" }, { "id": "01a0c502-0ea1-731d-a3da-0f2d695b013b", "title": "Toward Applied Andragogy in Cyber Security Education", "url": "https://chrissanders.org/2020/06/toward-applied-andragogy/?utm_source=rss&utm_medium=rss&utm_campaign=toward-applied-andragogy", "published_at": "2020-06-23T18:25:42+00:00" }, { "id": "01a0c502-0ea1-731d-a3da-0f2d69a6e25e", "title": "My Favorite Books of 2019", "url": "https://chrissanders.org/2019/12/favorite-books-2019/?utm_source=rss&utm_medium=rss&utm_campaign=favorite-books-2019", "published_at": "2019-12-10T18:52:11+00:00" }, { "id": "01a0c502-0ea1-731d-a3da-0f2d69ac157d", "title": "Creative Choices: Developing a Theory of Divergence, Convergence, and Intuition in Security Analysts", "url": "https://chrissanders.org/2019/10/creative-choices-paper/?utm_source=rss&utm_medium=rss&utm_campaign=creative-choices-paper", "published_at": "2019-10-04T14:30:56+00:00" }, { "id": "01a0c502-ce43-7278-ab6b-d749c992b07c", "title": "Learning to Forget: Infosec’s Unfortunate Departure from Spaced Learning", "url": "https://chrissanders.org/2019/08/spaced-learning/?utm_source=rss&utm_medium=rss&utm_campaign=spaced-learning", "published_at": "2019-08-07T14:00:20+00:00" }, { "id": "01a0c502-ce43-7278-ab6b-d749c9afaa92", "title": "What’s Next? Infosec Careers, Cognitive Dissonance, and Tours of Duty", "url": "https://chrissanders.org/2019/07/infosec-tour-of-duty/?utm_source=rss&utm_medium=rss&utm_campaign=infosec-tour-of-duty", "published_at": "2019-07-11T14:39:31+00:00" }, { "id": "01a0c502-ce43-7278-ab6b-d749ca0e789b", "title": "Information Security Mental Models", "url": "https://chrissanders.org/2019/05/infosec-mental-models/?utm_source=rss&utm_medium=rss&utm_campaign=infosec-mental-models", "published_at": "2019-05-29T14:51:22+00:00" }, { "id": "01a0c502-ce43-7278-ab6b-d749ca8fd5e4", "title": "New Course – Practical Threat Hunting", "url": "https://chrissanders.org/2019/03/new-course-practical-threat-hunting/?utm_source=rss&utm_medium=rss&utm_campaign=new-course-practical-threat-hunting", "published_at": "2019-03-08T15:37:37+00:00" }, { "id": "01a0c502-ce43-7278-ab6b-d749cb7cab3b", "title": "Perspective on the State of Computer Science in 2018 Report", "url": "https://chrissanders.org/2018/12/perspective-code-cs-access-2018/?utm_source=rss&utm_medium=rss&utm_campaign=perspective-code-cs-access-2018", "published_at": "2018-12-20T16:12:00+00:00" }, { "id": "01a0c502-ce43-7278-ab6b-d749cc78fc55", "title": "My Favorite Books of 2018", "url": "https://chrissanders.org/2018/12/favorite-books-2018/?utm_source=rss&utm_medium=rss&utm_campaign=favorite-books-2018", "published_at": "2018-12-13T15:02:36+00:00" }, { "id": "01a0c502-ce43-7278-ab6b-d749cd55a1e7", "title": "Content Matching Detection and Additional Outputs", "url": "https://chrissanders.org/2018/12/additional-outputs-content-matching/?utm_source=rss&utm_medium=rss&utm_campaign=additional-outputs-content-matching", "published_at": "2018-12-07T19:39:31+00:00" }, { "id": "01a0c502-ce43-7278-ab6b-d749cdaaa5d0", "title": "The Role of Evidence Intention", "url": "https://chrissanders.org/2018/10/the-role-of-evidence-intention/?utm_source=rss&utm_medium=rss&utm_campaign=the-role-of-evidence-intention", "published_at": "2018-10-24T13:32:15+00:00" }, { "id": "01a0c502-ce43-7278-ab6b-d749ce095223", "title": "Analyzing Large Capture Files 4: Whittling with Filters", "url": "https://chrissanders.org/2018/06/large-captures4-filter-whittling/?utm_source=rss&utm_medium=rss&utm_campaign=large-captures4-filter-whittling", "published_at": "2018-06-28T18:18:25+00:00" }, { "id": "01a0c502-ce43-7278-ab6b-d749ceb74992", "title": "Packet Analysis Workshop in Augusta, GA", "url": "https://chrissanders.org/2018/06/packet-workshop-augusta/?utm_source=rss&utm_medium=rss&utm_campaign=packet-workshop-augusta", "published_at": "2018-06-26T16:19:44+00:00" }, { "id": "01a0c50e-b0d2-72e0-b525-def80dbca287", "title": "Analyzing Large Capture Files 3 – Distillation with Security Tools", "url": "https://chrissanders.org/2018/05/large-captures3-distillation/?utm_source=rss&utm_medium=rss&utm_campaign=large-captures3-distillation", "published_at": "2018-05-23T17:57:05+00:00" }, { "id": "01a0c50e-b0d2-72e0-b525-def80e9845a8", "title": "Investigation Theory Coming to Charlottesville, VA", "url": "https://chrissanders.org/2018/05/investigation-theory-charlottesville/?utm_source=rss&utm_medium=rss&utm_campaign=investigation-theory-charlottesville", "published_at": "2018-05-22T12:17:10+00:00" }, { "id": "01a0c50e-b0d2-72e0-b525-def80f0174d7", "title": "Analyzing Large Capture Files Part 2 – Protocol Hierarchy", "url": "https://chrissanders.org/2018/05/large-captures2-proto-hierarchy/?utm_source=rss&utm_medium=rss&utm_campaign=large-captures2-proto-hierarchy", "published_at": "2018-05-15T17:33:16+00:00" }, { "id": "01a0c50e-b0d2-72e0-b525-def80f1b3ab1", "title": "Analyzing Large Capture Files Part 1 – Colorizing Conversations in Wireshark", "url": "https://chrissanders.org/2018/05/large-captures1-colorizing-wireshark/?utm_source=rss&utm_medium=rss&utm_campaign=large-captures1-colorizing-wireshark", "published_at": "2018-05-07T16:10:03+00:00" }, { "id": "01a0c50e-b0d2-72e0-b525-def80f1b83f0", "title": "Source Code S2: Episode 8 – Gwen Betts", "url": "https://chrissanders.org/2018/02/source-code-s2-episode-8-gwen-betts/?utm_source=rss&utm_medium=rss&utm_campaign=source-code-s2-episode-8-gwen-betts", "published_at": "2018-02-06T12:56:02+00:00" }, { "id": "01a0c50e-b0d2-72e0-b525-def80f8dec49", "title": "The Complete Cuckoo’s Egg Online Course Available for Free", "url": "https://chrissanders.org/2018/02/cuckoos-egg-course-download/?utm_source=rss&utm_medium=rss&utm_campaign=cuckoos-egg-course-download", "published_at": "2018-02-05T15:24:55+00:00" }, { "id": "01a0c50e-b0d2-72e0-b525-def80fb12d5d", "title": "Cuckoo’s Egg – Week 8 Notes", "url": "https://chrissanders.org/2018/02/cuckoos-egg-week-8-notes/?utm_source=rss&utm_medium=rss&utm_campaign=cuckoos-egg-week-8-notes", "published_at": "2018-02-02T00:00:59+00:00" }, { "id": "01a0c50e-b0d2-72e0-b525-def81096401b", "title": "Cuckoo’s Egg – Week 7 Notes", "url": "https://chrissanders.org/2018/01/cuckoos-egg-week-7-notes/?utm_source=rss&utm_medium=rss&utm_campaign=cuckoos-egg-week-7-notes", "published_at": "2018-01-26T00:00:02+00:00" }, { "id": "01a0c50e-b0d2-72e0-b525-def810cf45df", "title": "Source Code S2: Episode 7 – Michael W. Lucas", "url": "https://chrissanders.org/2018/01/source-code-s2-episode-7-michael-w-lucas/?utm_source=rss&utm_medium=rss&utm_campaign=source-code-s2-episode-7-michael-w-lucas", "published_at": "2018-01-16T14:48:41+00:00" }, { "id": "01a0c50e-b0d2-72e0-b525-def8118e6f0d", "title": "Cuckoo’s Egg – Week 6 Notes", "url": "https://chrissanders.org/2018/01/cuckoos-egg-week-6-notes/?utm_source=rss&utm_medium=rss&utm_campaign=cuckoos-egg-week-6-notes", "published_at": "2018-01-12T00:06:21+00:00" }, { "id": "01a0c51d-412c-71dc-a890-7c4be1124050", "title": "Cuckoo’s Egg – Week 5 Notes", "url": "https://chrissanders.org/2018/01/cuckoos-egg-week-5-notes/?utm_source=rss&utm_medium=rss&utm_campaign=cuckoos-egg-week-5-notes", "published_at": "2018-01-04T21:15:47+00:00" }, { "id": "01a0c51d-412c-71dc-a890-7c4be1a145b1", "title": "Source Code S2: Episode 6 – Jennifer Kolde", "url": "https://chrissanders.org/2018/01/source-code-s2-episode-6-jennifer-kolde/?utm_source=rss&utm_medium=rss&utm_campaign=source-code-s2-episode-6-jennifer-kolde", "published_at": "2018-01-02T14:10:43+00:00" }, { "id": "01a0c51d-412c-71dc-a890-7c4be1b0f073", "title": "Source Code S2: Episode 5 – Grady Summers", "url": "https://chrissanders.org/2017/12/source-code-s2-episode-5-grady-summers/?utm_source=rss&utm_medium=rss&utm_campaign=source-code-s2-episode-5-grady-summers", "published_at": "2017-12-12T13:42:20+00:00" }, { "id": "01a0c51d-412c-71dc-a890-7c4be1fc8760", "title": "Cuckoo’s Egg – Week 4 Notes", "url": "https://chrissanders.org/2017/12/cuckoos-egg-week-4-notes/?utm_source=rss&utm_medium=rss&utm_campaign=cuckoos-egg-week-4-notes", "published_at": "2017-12-08T01:37:21+00:00" }, { "id": "01a0c51d-412c-71dc-a890-7c4be26ec08d", "title": "Help Me Introduce Rural 100,000 Students to Technology", "url": "https://chrissanders.org/2017/12/100000-students/?utm_source=rss&utm_medium=rss&utm_campaign=100000-students", "published_at": "2017-12-01T19:51:44+00:00" }, { "id": "01a0c51d-412c-71dc-a890-7c4be302060f", "title": "Cuckoo’s Egg – Week 3 Notes", "url": "https://chrissanders.org/2017/11/cuckoos-egg-week-3-notes/?utm_source=rss&utm_medium=rss&utm_campaign=cuckoos-egg-week-3-notes", "published_at": "2017-11-30T23:47:00+00:00" }, { "id": "01a0c51d-412c-71dc-a890-7c4be3c41b30", "title": "Source Code S2: Episode 4 – Sergio Caltagirone", "url": "https://chrissanders.org/2017/11/source-code-s2-episode-4-sergio-caltagirone/?utm_source=rss&utm_medium=rss&utm_campaign=source-code-s2-episode-4-sergio-caltagirone", "published_at": "2017-11-28T13:32:51+00:00" }, { "id": "01a0c51d-412c-71dc-a890-7c4be43690f4", "title": "Cuckoo’s Egg – Week 2 Notes", "url": "https://chrissanders.org/2017/11/cuckoos-egg-week-2-notes/?utm_source=rss&utm_medium=rss&utm_campaign=cuckoos-egg-week-2-notes", "published_at": "2017-11-17T00:00:12+00:00" }, { "id": "01a0c51d-412c-71dc-a890-7c4be44750f8", "title": "Source Code S2: Episode 3 – Haroon Meer", "url": "https://chrissanders.org/2017/11/source-code-s2-e3-haroon-meer/?utm_source=rss&utm_medium=rss&utm_campaign=source-code-s2-e3-haroon-meer", "published_at": "2017-11-14T14:25:56+00:00" }, { "id": "01a0c51d-412c-71dc-a890-7c4be48f6a4a", "title": "Cuckoo’s Egg – Week 1 Notes", "url": "https://chrissanders.org/2017/11/cuckoos-egg-week-1-notes/?utm_source=rss&utm_medium=rss&utm_campaign=cuckoos-egg-week-1-notes", "published_at": "2017-11-10T01:31:44+00:00" }, { "id": "01a0c528-66c2-726c-881c-cf2747da7e4a", "title": "The AND Student Charitable Profit Sharing Program", "url": "https://chrissanders.org/2017/11/and-charitable-sharing/?utm_source=rss&utm_medium=rss&utm_campaign=and-charitable-sharing", "published_at": "2017-11-03T17:34:38+00:00" }, { "id": "01a0c528-66c2-726c-881c-cf27485a5470", "title": "Forcing Attacker Decisions", "url": "https://chrissanders.org/2017/11/forcing-attacker-decisions/?utm_source=rss&utm_medium=rss&utm_campaign=forcing-attacker-decisions", "published_at": "2017-11-02T13:55:32+00:00" }, { "id": "01a0c528-66c2-726c-881c-cf2748be5b45", "title": "Source Code S2: Episode 2 – Rick Holland", "url": "https://chrissanders.org/2017/10/source-code-s2-episode-2-rick-holland/?utm_source=rss&utm_medium=rss&utm_campaign=source-code-s2-episode-2-rick-holland", "published_at": "2017-10-31T12:55:54+00:00" }, { "id": "01a0c528-66c2-726c-881c-cf274979787e", "title": "Source Code S2: Episode 1 – Richard Bejtlich", "url": "https://chrissanders.org/2017/10/source-code-s2-episode-1-richard-bejtlich/?utm_source=rss&utm_medium=rss&utm_campaign=source-code-s2-episode-1-richard-bejtlich", "published_at": "2017-10-17T15:35:34+00:00" }, { "id": "01a0c528-66c2-726c-881c-cf2749ef96dd", "title": "Gaining Technical Experience with Deliberate Practice", "url": "https://chrissanders.org/2017/10/deliberate-practice/?utm_source=rss&utm_medium=rss&utm_campaign=deliberate-practice", "published_at": "2017-10-10T13:31:32+00:00" }, { "id": "01a0c528-66c2-726c-881c-cf274a2fce63", "title": "The Cuckoo’s Egg Decompiled: An Introduction to Information Security", "url": "https://chrissanders.org/2017/09/cuckoos-egg-course/?utm_source=rss&utm_medium=rss&utm_campaign=cuckoos-egg-course", "published_at": "2017-09-19T15:04:14+00:00" }, { "id": "01a0c528-66c2-726c-881c-cf274ac61bd4", "title": "New Online Course: ELK for Security Analysis", "url": "https://chrissanders.org/2017/07/new-course-elk-for-security-analysis/?utm_source=rss&utm_medium=rss&utm_campaign=new-course-elk-for-security-analysis", "published_at": "2017-07-21T14:29:19+00:00" }, { "id": "01a0c528-66c2-726c-881c-cf274ac970c1", "title": "Rural Tech Fund Shirts", "url": "https://chrissanders.org/2017/07/rtf-shirts/?utm_source=rss&utm_medium=rss&utm_campaign=rtf-shirts", "published_at": "2017-07-12T13:31:57+00:00" }, { "id": "01a0c528-66c2-726c-881c-cf274bc6c7f5", "title": "Source Code S1: Episode 8 – Jason Smith", "url": "https://chrissanders.org/2017/07/source-code-s1-episode-8-jason-smith/?utm_source=rss&utm_medium=rss&utm_campaign=source-code-s1-episode-8-jason-smith", "published_at": "2017-07-06T12:56:32+00:00" }, { "id": "01a0c528-66c2-726c-881c-cf274c3bafdf", "title": "Source Code S1: Episode 7 – Bill Pollock", "url": "https://chrissanders.org/2017/06/source-code-s1-episode-7-bill-pollock/?utm_source=rss&utm_medium=rss&utm_campaign=source-code-s1-episode-7-bill-pollock", "published_at": "2017-06-22T13:26:29+00:00" }, { "id": "01a0c533-93f7-72d7-8b01-3ff96d3e962f", "title": "The Cult of Passion", "url": "https://chrissanders.org/2017/06/the-cult-of-passion/?utm_source=rss&utm_medium=rss&utm_campaign=the-cult-of-passion", "published_at": "2017-06-20T23:47:32+00:00" }, { "id": "01a0c533-93f7-72d7-8b01-3ff96e352fc8", "title": "Source Code S1: Episode 6 – Matt Swann", "url": "https://chrissanders.org/2017/06/source-code-s1-episode-6-matt-swann/?utm_source=rss&utm_medium=rss&utm_campaign=source-code-s1-episode-6-matt-swann", "published_at": "2017-06-08T12:13:53+00:00" }, { "id": "01a0c533-93f7-72d7-8b01-3ff96ee35769", "title": "Security Onion Cheat Sheet", "url": "https://chrissanders.org/2017/06/security-onion-cheat-sheet/?utm_source=rss&utm_medium=rss&utm_campaign=security-onion-cheat-sheet", "published_at": "2017-06-06T15:49:00+00:00" }, { "id": "01a0c533-93f7-72d7-8b01-3ff96f5df036", "title": "Investigation Theory Course On Site in Augusta, GA!", "url": "https://chrissanders.org/2017/06/investigation-theory-augusta/?utm_source=rss&utm_medium=rss&utm_campaign=investigation-theory-augusta", "published_at": "2017-06-05T14:10:50+00:00" }, { "id": "01a0c533-93f7-72d7-8b01-3ff96ff0823c", "title": "Source Code S1: Episode 5 – Gerald Combs", "url": "https://chrissanders.org/2017/05/source-code-s1-episode-5-gerald-combs/?utm_source=rss&utm_medium=rss&utm_campaign=source-code-s1-episode-5-gerald-combs", "published_at": "2017-05-25T12:36:35+00:00" }, { "id": "01a0c533-93f7-72d7-8b01-3ff9707dd86a", "title": "5 Human-Centered Takeaways from the SANS SOC Survey", "url": "https://chrissanders.org/2017/05/5-human-centered-takeaways-from-the-sans-soc-survey/?utm_source=rss&utm_medium=rss&utm_campaign=5-human-centered-takeaways-from-the-sans-soc-survey", "published_at": "2017-05-24T14:43:32+00:00" }, { "id": "01a0c533-93f7-72d7-8b01-3ff9714994a7", "title": "Source Code S1: Episode 4 – Mike Poor", "url": "https://chrissanders.org/2017/05/source-code-s1-e4-mike-poor/?utm_source=rss&utm_medium=rss&utm_campaign=source-code-s1-e4-mike-poor", "published_at": "2017-05-11T13:26:47+00:00" }, { "id": "01a0c533-93f7-72d7-8b01-3ff971f22d1e", "title": "Know Your Bias – Availability Heuristic", "url": "https://chrissanders.org/2017/05/know-your-bias-availability-heuristic/?utm_source=rss&utm_medium=rss&utm_campaign=know-your-bias-availability-heuristic", "published_at": "2017-05-03T14:12:32+00:00" }, { "id": "01a0c533-93f7-72d7-8b01-3ff972b9d555", "title": "Practical Packet Analysis Photo Contest", "url": "https://chrissanders.org/2017/05/ppa-photo-contest/?utm_source=rss&utm_medium=rss&utm_campaign=ppa-photo-contest", "published_at": "2017-05-01T21:52:41+00:00" }, { "id": "01a0c533-93f7-72d7-8b01-3ff97350c1bf", "title": "Source Code S1: Episode 3 – Magen Wu", "url": "https://chrissanders.org/2017/04/source-code-s1-episode-3-magen-wu/?utm_source=rss&utm_medium=rss&utm_campaign=source-code-s1-episode-3-magen-wu", "published_at": "2017-04-27T15:17:35+00:00" }, { "id": "01a0c53e-30b2-7345-b96d-a84bf25369e7", "title": "Source Code S1: Episode 2 – Doug Burks", "url": "https://chrissanders.org/2017/04/podcast-s1e2-dougburks/?utm_source=rss&utm_medium=rss&utm_campaign=podcast-s1e2-dougburks", "published_at": "2017-04-13T12:19:11+00:00" }, { "id": "01a0c53e-30b2-7345-b96d-a84bf3379ef4", "title": "Time, Straight Lines, and the Next Step", "url": "https://chrissanders.org/2017/04/time-straight-lines-and-next-step/?utm_source=rss&utm_medium=rss&utm_campaign=time-straight-lines-and-next-step", "published_at": "2017-04-04T14:27:07+00:00" }, { "id": "01a0c53e-30b2-7345-b96d-a84bf3723cbe", "title": "Introducing the Source Code Podcast", "url": "https://chrissanders.org/2017/03/introducing-source-code-podcast/?utm_source=rss&utm_medium=rss&utm_campaign=introducing-source-code-podcast", "published_at": "2017-03-30T13:54:11+00:00" }, { "id": "01a0c53e-30b2-7345-b96d-a84bf470a64f", "title": "Announcing the Practical Packet Analysis Online Course", "url": "https://chrissanders.org/2017/03/announcing-the-practical-packet-analysis-online-course/?utm_source=rss&utm_medium=rss&utm_campaign=announcing-the-practical-packet-analysis-online-course", "published_at": "2017-03-29T19:05:45+00:00" }, { "id": "01a0c53e-30b2-7345-b96d-a84bf4756e73", "title": "Investigation Case Management with TheHive", "url": "https://chrissanders.org/2017/03/case-management-the-hive/?utm_source=rss&utm_medium=rss&utm_campaign=case-management-the-hive", "published_at": "2017-03-14T14:19:35+00:00" }, { "id": "01a0c53e-30b2-7345-b96d-a84bf4b420a1", "title": "Practical Packet Analysis 3rd Edition Released!", "url": "https://chrissanders.org/2017/03/ppa3-release/?utm_source=rss&utm_medium=rss&utm_campaign=ppa3-release", "published_at": "2017-03-08T21:26:07+00:00" }, { "id": "01a0c53e-30b2-7345-b96d-a84bf4c733dc", "title": "Increase Security Reporting with Contact Cards", "url": "https://chrissanders.org/2017/03/security-contact-cards/?utm_source=rss&utm_medium=rss&utm_campaign=security-contact-cards", "published_at": "2017-03-07T18:54:51+00:00" }, { "id": "01a0c53e-30b2-7345-b96d-a84bf5877077", "title": "Training Course Scholarships", "url": "https://chrissanders.org/2017/03/training-course-scholarships/?utm_source=rss&utm_medium=rss&utm_campaign=training-course-scholarships", "published_at": "2017-03-02T19:28:41+00:00" }, { "id": "01a0c53e-30b2-7345-b96d-a84bf5eb3e48", "title": "Know Your Bias – Anchoring", "url": "https://chrissanders.org/2017/01/know-your-bias-2-anchoring/?utm_source=rss&utm_medium=rss&utm_campaign=know-your-bias-2-anchoring", "published_at": "2017-01-09T15:05:29+00:00" }, { "id": "01a0c53e-30b2-7345-b96d-a84bf6945e76", "title": "Know your Bias – Foundations", "url": "https://chrissanders.org/2017/01/know-your-bias-1-foundations/?utm_source=rss&utm_medium=rss&utm_campaign=know-your-bias-1-foundations", "published_at": "2017-01-03T19:01:00+00:00" }, { "id": "01a0c546-a90b-7350-bf18-9ae3999abf4a", "title": "Announcing the Investigation Theory Online Course", "url": "https://chrissanders.org/2016/12/announcing-investigation-theory-course/?utm_source=rss&utm_medium=rss&utm_campaign=announcing-investigation-theory-course", "published_at": "2016-12-05T14:26:02+00:00" }, { "id": "01a0c546-a90b-7350-bf18-9ae39a99906a", "title": "Making an Impact with Local Security Conferences", "url": "https://chrissanders.org/2016/11/impact-security-conferences/?utm_source=rss&utm_medium=rss&utm_campaign=impact-security-conferences", "published_at": "2016-11-21T16:13:28+00:00" }, { "id": "01a0c546-a90b-7350-bf18-9ae39aeee993", "title": "Three Useful SOC Dashboards", "url": "https://chrissanders.org/2016/10/three-useful-soc-dashboards/?utm_source=rss&utm_medium=rss&utm_campaign=three-useful-soc-dashboards", "published_at": "2016-10-24T15:07:04+00:00" }, { "id": "01a0c546-a90b-7350-bf18-9ae39bdbeefa", "title": "The Effects of Opening Move Selection on Investigation Speed", "url": "https://chrissanders.org/2016/09/effects-of-opening-move-investigation-speed/?utm_source=rss&utm_medium=rss&utm_campaign=effects-of-opening-move-investigation-speed", "published_at": "2016-09-29T14:15:08+00:00" }, { "id": "01a0c546-a90b-7350-bf18-9ae39c10df6d", "title": "Video: Tracking Investigations with Timelines", "url": "https://chrissanders.org/2016/06/video-tracking-investigations-timelines/?utm_source=rss&utm_medium=rss&utm_campaign=video-tracking-investigations-timelines", "published_at": "2016-06-14T15:10:58+00:00" }, { "id": "01a0c546-a90b-7350-bf18-9ae39cc6ee99", "title": "Accelerating Experience with Investigation Heuristics", "url": "https://chrissanders.org/2016/05/accelerating-experience-with-investigation-heuristics/?utm_source=rss&utm_medium=rss&utm_campaign=accelerating-experience-with-investigation-heuristics", "published_at": "2016-05-10T13:21:11+00:00" }, { "id": "01a0c546-a90b-7350-bf18-9ae39da24066", "title": "How Analysts Approach Investigations with Diagnostic Inquiry", "url": "https://chrissanders.org/2016/05/how-analysts-approach-investigations/?utm_source=rss&utm_medium=rss&utm_campaign=how-analysts-approach-investigations", "published_at": "2016-05-04T14:09:16+00:00" }, { "id": "01a0c546-a90b-7350-bf18-9ae39e8c7908", "title": "Writing for Security: Action Items that Provoke Change", "url": "https://chrissanders.org/2016/03/writing-for-hackers-5-action-items-change/?utm_source=rss&utm_medium=rss&utm_campaign=writing-for-hackers-5-action-items-change", "published_at": "2016-03-21T15:01:50+00:00" }, { "id": "01a0c546-a90b-7350-bf18-9ae39f093da7", "title": "Video: Building an NSM Lab", "url": "https://chrissanders.org/2016/03/video-building-an-nsm-lab/?utm_source=rss&utm_medium=rss&utm_campaign=video-building-an-nsm-lab", "published_at": "2016-03-14T16:38:35+00:00" }, { "id": "01a0c546-a90b-7350-bf18-9ae39f808ba1", "title": "Writing for Security: Making People Give a Damn", "url": "https://chrissanders.org/2016/03/writing-for-hackers-4-making-people-give-a-damn/?utm_source=rss&utm_medium=rss&utm_campaign=writing-for-hackers-4-making-people-give-a-damn", "published_at": "2016-03-14T13:42:13+00:00" }, { "id": "01a0c54f-6845-7243-a637-a30f19c3affe", "title": "Writing for Security: Making it Matter to You", "url": "https://chrissanders.org/2016/03/writing-for-hackers-3-making-it-matter-to-you/?utm_source=rss&utm_medium=rss&utm_campaign=writing-for-hackers-3-making-it-matter-to-you", "published_at": "2016-03-09T13:05:41+00:00" }, { "id": "01a0c54f-6845-7243-a637-a30f1a3bf44a", "title": "Writing for Security: Why You Fear It", "url": "https://chrissanders.org/2016/03/writing-for-hackers-2-why-you-feair-it/?utm_source=rss&utm_medium=rss&utm_campaign=writing-for-hackers-2-why-you-feair-it", "published_at": "2016-03-07T18:31:07+00:00" }, { "id": "01a0c54f-6845-7243-a637-a30f1b06b473", "title": "Writing for Security: Why You Hate It", "url": "https://chrissanders.org/2016/03/writing-for-hackers-1-why-you-hate-it/?utm_source=rss&utm_medium=rss&utm_campaign=writing-for-hackers-1-why-you-hate-it", "published_at": "2016-03-03T13:17:25+00:00" }, { "id": "01a0c54f-6845-7243-a637-a30f1b42c1a8", "title": "Mailing List Availability", "url": "https://chrissanders.org/2016/03/newsletter-availability/?utm_source=rss&utm_medium=rss&utm_campaign=newsletter-availability", "published_at": "2016-03-01T15:14:16+00:00" }, { "id": "01a0c54f-6845-7243-a637-a30f1c2e83df", "title": "Survey: Technical Writing Pain Points", "url": "https://chrissanders.org/2016/02/survey-security-writing-pain-points/?utm_source=rss&utm_medium=rss&utm_campaign=survey-security-writing-pain-points", "published_at": "2016-02-28T23:53:46+00:00" }, { "id": "01a0c54f-6845-7243-a637-a30f1cb4b800", "title": "The Role of Curiosity in Security Investigations", "url": "https://chrissanders.org/2016/01/curiosity-in-security-investigations/?utm_source=rss&utm_medium=rss&utm_campaign=curiosity-in-security-investigations", "published_at": "2016-01-27T20:54:58+00:00" }, { "id": "01a0c54f-6845-7243-a637-a30f1dadcc99", "title": "Research Call for Security Investigators", "url": "https://chrissanders.org/2016/01/call-for-investigators/?utm_source=rss&utm_medium=rss&utm_campaign=call-for-investigators", "published_at": "2016-01-05T13:16:51+00:00" }, { "id": "01a0c54f-6845-7243-a637-a30f1dc45bfc", "title": "Launching Makerspaces Across Rural America", "url": "https://chrissanders.org/2015/11/mara-launch/?utm_source=rss&utm_medium=rss&utm_campaign=mara-launch", "published_at": "2015-11-03T15:25:21+00:00" }, { "id": "01a0c54f-6845-7243-a637-a30f1e5cf863", "title": "Infosec Practitioner’s Guide to Philanthropy", "url": "https://chrissanders.org/2015/10/infosec-guide-to-philanthropy/?utm_source=rss&utm_medium=rss&utm_campaign=infosec-guide-to-philanthropy", "published_at": "2015-10-30T15:48:39+00:00" }, { "id": "01a0c54f-6845-7243-a637-a30f1e629141", "title": "Inattentional Blindness in Security Investigations", "url": "https://chrissanders.org/2015/08/inattentional-blindness/?utm_source=rss&utm_medium=rss&utm_campaign=inattentional-blindness", "published_at": "2015-08-06T16:02:56+00:00" } ] posts Claim your blog

Back to chrissanders.org

Blog · corpus.blog/blogs/chrissanders.org/posts

chrissanders.org

chrissanders.org

2025

My Favorite Books of 2025 original ↗

17 Dec 2025

Milo and the Midnight Meteorite: A Children’s Book original ↗

25 Aug 2025

A Standard for Human-Centered Investigation Playbooks original ↗

25 Jun 2025

My Favorite Books of 2024 original ↗

10 Jan 2025

2024

My Favorite Books of 2023 original ↗

24 Jan 2024

2023

My Favorite Books of 2022 original ↗

11 Jan 2023

2022

Win My 2022 Golden Ticket for Free Training original ↗

6 Dec 2022

2022 Holiday Training Sale original ↗

25 Nov 2022

2021

My Favorite Books of 2021 original ↗

20 Dec 2021

A Cognitive Skills Assessment of Digital Forensic Analysts – My Doctoral Dissertation original ↗

9 Dec 2021

Win My Golden Ticket!original ↗

6 Dec 2021

Building Intrusion Detection Honeypots Online Course original ↗

27 Apr 2021

Come Join Me at AND original ↗

22 Jan 2021

2020

My Favorite Books of 2020 original ↗

3 Dec 2020

New Book: Intrusion Detection Honeypots original ↗

1 Sept 2020

A Socratic Outline for Discussing the OST Release Debate original ↗

21 Jul 2020

The Call for Applied Research on Offensive Security Tool Release original ↗

21 Jul 2020

Toward Applied Andragogy in Cyber Security Education original ↗

23 Jun 2020

2019

My Favorite Books of 2019 original ↗

10 Dec 2019

Creative Choices: Developing a Theory of Divergence, Convergence, and Intuition in Security Analysts original ↗

4 Oct 2019

Learning to Forget: Infosec’s Unfortunate Departure from Spaced Learning original ↗

7 Aug 2019

What’s Next? Infosec Careers, Cognitive Dissonance, and Tours of Duty original ↗

11 Jul 2019

Information Security Mental Models original ↗

29 May 2019

New Course – Practical Threat Hunting original ↗

8 Mar 2019

2018

Perspective on the State of Computer Science in 2018 Report original ↗

20 Dec 2018

My Favorite Books of 2018 original ↗

13 Dec 2018

Content Matching Detection and Additional Outputs original ↗

7 Dec 2018

The Role of Evidence Intention original ↗

24 Oct 2018

Analyzing Large Capture Files 4: Whittling with Filters original ↗

28 Jun 2018

Packet Analysis Workshop in Augusta, GA original ↗

26 Jun 2018

Analyzing Large Capture Files 3 – Distillation with Security Tools original ↗

23 May 2018

Investigation Theory Coming to Charlottesville, VA original ↗

22 May 2018

Analyzing Large Capture Files Part 2 – Protocol Hierarchy original ↗

15 May 2018

Analyzing Large Capture Files Part 1 – Colorizing Conversations in Wireshark original ↗

7 May 2018

Source Code S2: Episode 8 – Gwen Betts original ↗

6 Feb 2018

The Complete Cuckoo’s Egg Online Course Available for Free original ↗

5 Feb 2018

Cuckoo’s Egg – Week 8 Notes original ↗

2 Feb 2018

Cuckoo’s Egg – Week 7 Notes original ↗

26 Jan 2018

Source Code S2: Episode 7 – Michael W. Lucas original ↗

16 Jan 2018

Cuckoo’s Egg – Week 6 Notes original ↗

12 Jan 2018

Cuckoo’s Egg – Week 5 Notes original ↗

4 Jan 2018

Source Code S2: Episode 6 – Jennifer Kolde original ↗

2 Jan 2018

2017

Source Code S2: Episode 5 – Grady Summers original ↗

12 Dec 2017

Cuckoo’s Egg – Week 4 Notes original ↗

8 Dec 2017

Help Me Introduce Rural 100,000 Students to Technology original ↗

1 Dec 2017

Cuckoo’s Egg – Week 3 Notes original ↗

30 Nov 2017

Source Code S2: Episode 4 – Sergio Caltagirone original ↗

28 Nov 2017

Cuckoo’s Egg – Week 2 Notes original ↗

17 Nov 2017

Source Code S2: Episode 3 – Haroon Meer original ↗

14 Nov 2017

Cuckoo’s Egg – Week 1 Notes original ↗

10 Nov 2017

The AND Student Charitable Profit Sharing Program original ↗

3 Nov 2017

Forcing Attacker Decisions original ↗

2 Nov 2017

Source Code S2: Episode 2 – Rick Holland original ↗

31 Oct 2017

Source Code S2: Episode 1 – Richard Bejtlich original ↗

17 Oct 2017

Gaining Technical Experience with Deliberate Practice original ↗

10 Oct 2017

The Cuckoo’s Egg Decompiled: An Introduction to Information Security original ↗

19 Sept 2017

New Online Course: ELK for Security Analysis original ↗

21 Jul 2017

Rural Tech Fund Shirts original ↗

12 Jul 2017

Source Code S1: Episode 8 – Jason Smith original ↗

6 Jul 2017

Source Code S1: Episode 7 – Bill Pollock original ↗

22 Jun 2017

The Cult of Passion original ↗

20 Jun 2017

Source Code S1: Episode 6 – Matt Swann original ↗

8 Jun 2017

Security Onion Cheat Sheet original ↗

6 Jun 2017

Investigation Theory Course On Site in Augusta, GA!original ↗

5 Jun 2017

Source Code S1: Episode 5 – Gerald Combs original ↗

25 May 2017

5 Human-Centered Takeaways from the SANS SOC Survey original ↗

24 May 2017

Source Code S1: Episode 4 – Mike Poor original ↗

11 May 2017

Know Your Bias – Availability Heuristic original ↗

3 May 2017

Practical Packet Analysis Photo Contest original ↗

1 May 2017

Source Code S1: Episode 3 – Magen Wu original ↗

27 Apr 2017

Source Code S1: Episode 2 – Doug Burks original ↗

13 Apr 2017

Time, Straight Lines, and the Next Step original ↗

4 Apr 2017

Introducing the Source Code Podcast original ↗

30 Mar 2017

Announcing the Practical Packet Analysis Online Course original ↗

29 Mar 2017

Investigation Case Management with TheHive original ↗

14 Mar 2017

Practical Packet Analysis 3rd Edition Released!original ↗

8 Mar 2017

Increase Security Reporting with Contact Cards original ↗

7 Mar 2017

Training Course Scholarships original ↗

2 Mar 2017

Know Your Bias – Anchoring original ↗

9 Jan 2017

Know your Bias – Foundations original ↗

3 Jan 2017

2016

Announcing the Investigation Theory Online Course original ↗

5 Dec 2016

Making an Impact with Local Security Conferences original ↗

21 Nov 2016

Three Useful SOC Dashboards original ↗

24 Oct 2016

The Effects of Opening Move Selection on Investigation Speed original ↗

29 Sept 2016

Video: Tracking Investigations with Timelines original ↗

14 Jun 2016

Accelerating Experience with Investigation Heuristics original ↗

10 May 2016

How Analysts Approach Investigations with Diagnostic Inquiry original ↗

4 May 2016

Writing for Security: Action Items that Provoke Change original ↗

21 Mar 2016

Video: Building an NSM Lab original ↗

14 Mar 2016

Writing for Security: Making People Give a Damn original ↗

14 Mar 2016

Writing for Security: Making it Matter to You original ↗

9 Mar 2016

Writing for Security: Why You Fear It original ↗

7 Mar 2016

Writing for Security: Why You Hate It original ↗

3 Mar 2016

Mailing List Availability original ↗

1 Mar 2016

Survey: Technical Writing Pain Points original ↗

28 Feb 2016

The Role of Curiosity in Security Investigations original ↗

27 Jan 2016

Research Call for Security Investigators original ↗

5 Jan 2016

2015

Launching Makerspaces Across Rural America original ↗

3 Nov 2015

Infosec Practitioner’s Guide to Philanthropy original ↗

30 Oct 2015

Inattentional Blindness in Security Investigations original ↗

6 Aug 2015