corpus.blog
41554 blogs · [ { "id": "01a087d6-0548-7390-a880-56c47f1779d0", "title": "Back in Military Service – From Blue to Green", "url": "https://www.robertmlee.org/back-in-military-service-from-blue-to-green/", "published_at": "2025-03-03T14:57:18+00:00" }, { "id": "01a087d6-0549-73b7-9dad-4d60ab9d3d05", "title": "My Reaction to the Bloomberg Article on Me and the 100 Day Action Plan", "url": "https://www.robertmlee.org/my-reaction-to-the-bloomberg-article-on-me-and-the-100-day-action-plan/", "published_at": "2022-06-11T00:24:33+00:00" }, { "id": "01a087d6-0549-73b7-9dad-4d60ac0338ea", "title": "Structuring Cyber Threat Intelligence Assessments: Musings and Recommendations", "url": "https://www.robertmlee.org/structuring-cyber-threat-intelligence-assessments-musings-and-recommendations/", "published_at": "2022-01-15T22:18:12+00:00" }, { "id": "01a087d6-0549-73b7-9dad-4d60ac5ed98a", "title": "Cybersecurity Has Much to Learn from Industrial Safety Planning", "url": "https://www.robertmlee.org/cybersecurity-has-much-to-learn-from-industrial-safety-planning/", "published_at": "2021-05-07T14:37:19+00:00" }, { "id": "01a087d6-0549-73b7-9dad-4d60acf1ca1a", "title": "What a Record Setting Investment into the ICS/OT Cybersecurity Market Means to Me", "url": "https://www.robertmlee.org/what-a-record-setting-investment-into-the-icsot-cybersecurity-market-means-to-me/", "published_at": "2020-12-08T15:06:32+00:00" }, { "id": "01a087d6-0549-73b7-9dad-4d60addd5998", "title": "The Department of Energy’s New Grid Resilience for National Security (GRNS) Subcommittee", "url": "https://www.robertmlee.org/the-department-of-energys-new-grid-resilience-for-national-security-grns-subcommittee/", "published_at": "2020-11-30T22:04:08+00:00" }, { "id": "01a087d6-0549-73b7-9dad-4d60ae400c82", "title": "Should Governments Actively Defend Private Sector Networks?", "url": "https://www.robertmlee.org/should-governments-actively-defend-private-sector-networks/", "published_at": "2020-08-07T13:58:44+00:00" }, { "id": "01a087d6-0549-73b7-9dad-4d60aed9efbc", "title": "DISC: SANS ICS Virtual Conference and ICS CTF Event Details", "url": "https://www.robertmlee.org/disc-sans-ics-virtual-conference-and-ics-ctf-event-details/", "published_at": "2020-04-26T16:24:13+00:00" }, { "id": "01a0bdf6-a3a0-7202-9d2b-23d1a8b6aba0", "title": "Claims of a Cyber Attack on Iran’s Abadan Oil Refinery and the Need for Root Cause Analysis", "url": "https://www.robertmlee.org/claims-of-a-cyber-attack-on-irans-abadan-oil-refinery-and-the-need-for-root-cause-analysis/", "published_at": "2019-10-20T18:38:06+00:00" }, { "id": "01a0bdf6-a3a0-7202-9d2b-23d1a90b26f8", "title": "Goodbye Mike Assante, Thank you For Literally Everything", "url": "https://www.robertmlee.org/goodbye-mike-assante-thank-you-for-literally-everything/", "published_at": "2019-07-06T22:06:39+00:00" }, { "id": "01a0bdf6-a3a0-7202-9d2b-23d1a916e201", "title": "Homogeneous Infrastructure and Scalable Attacks", "url": "https://www.robertmlee.org/homogeneous-infrastructure-and-scalable-attacks/", "published_at": "2019-06-15T03:49:12+00:00" }, { "id": "01a0bdf6-a3a0-7202-9d2b-23d1aa133eda", "title": "Attribution is not Transitive – Tribune Publishing Cyber Attack as a Case Study", "url": "https://www.robertmlee.org/attribution-is-not-transitive-tribune-publishing-cyber-attack-as-a-case-study/", "published_at": "2018-12-31T11:27:24+00:00" }, { "id": "01a0bdf6-a3a0-7202-9d2b-23d1aae0ba5b", "title": "Threat Hunting, TTPs, Indicators, and MITRE ATT&CK – Bingo", "url": "https://www.robertmlee.org/threat-hunting-ttps-indicators-and-mitre-attck-bingo/", "published_at": "2018-11-25T15:14:24+00:00" }, { "id": "01a0bdf6-a3a0-7202-9d2b-23d1ab594cd0", "title": "Hunting vs. Incident Response vs. Just Doing Your Job", "url": "https://www.robertmlee.org/hunting-vs-incident-response-vs-just-doing-your-job/", "published_at": "2018-11-22T20:04:07+00:00" }, { "id": "01a0bdf6-a3a0-7202-9d2b-23d1ac0bcee7", "title": "What It’s Like to Raise Venture Capital (Just My Experience)", "url": "https://www.robertmlee.org/what-its-like-to-raise-venture-capital-just-my-experience/", "published_at": "2018-11-22T18:40:49+00:00" }, { "id": "01a0bdf6-a3a0-7202-9d2b-23d1ac362701", "title": "What It’s Like to Testify to the U.S. Senate", "url": "https://www.robertmlee.org/what-its-like-to-testify-to-the-u-s-senate/", "published_at": "2018-07-21T22:33:49+00:00" }, { "id": "01a0be04-aa92-73c7-8eb8-4550158f2a26", "title": "Russian Election Meddling, GRIZZLYSTEPPE, and Bananas", "url": "https://www.robertmlee.org/russian-election-meddling-grizzleysteppe-and-bananas/", "published_at": "2017-08-17T17:48:43+00:00" }, { "id": "01a0be04-aa92-73c7-8eb8-4550164c61a1", "title": "Marketing ICS Vulnerabilities and POC Malware – You’re Doing it Wrong", "url": "https://www.robertmlee.org/marketing-ics-vulnerabilities-and-poc-malware-youre-doing-it-wrong/", "published_at": "2017-04-30T16:33:26+00:00" }, { "id": "01a0be04-aa92-73c7-8eb8-4550171e9c59", "title": "Analytical Leaps and Wild Speculation in Recent Reports of Industrial Cyber Attacks", "url": "https://www.robertmlee.org/analytical-leaps-and-wild-speculation-in-recent-reports-of-industrial-cyber-attacks/", "published_at": "2016-12-31T11:28:36+00:00" }, { "id": "01a0be04-aa92-73c7-8eb8-455017520939", "title": "Critiques of the DHS/FBI’s GRIZZLY STEPPE Report", "url": "https://www.robertmlee.org/critiques-of-the-dhsfbis-grizzly-steppe-report/", "published_at": "2016-12-30T14:43:48+00:00" }, { "id": "01a0be04-aa92-73c7-8eb8-455017bbcffd", "title": "New Suspected Cyber Attack on Ukraine Power Grid – Advice as Information Emerges", "url": "https://www.robertmlee.org/new-suspected-cyber-attack-on-ukraine-power-grid-advice-as-information-emerges/", "published_at": "2016-12-19T23:18:50+00:00" }, { "id": "01a0be04-aa92-73c7-8eb8-455017fa714d", "title": "Threats of Cyber Attacks Against Russia: Rationale on Discussing Operations and the Precedent Set", "url": "https://www.robertmlee.org/threats-of-cyber-attacks-against-russia-rationale-on-discussing-operations-and-the-precedent-set/", "published_at": "2016-11-06T09:29:47+00:00" }, { "id": "01a0be04-aa92-73c7-8eb8-45501866b52d", "title": "A Collection of Resources for Getting Started in ICS/SCADA Cybersecurity", "url": "https://www.robertmlee.org/a-collection-of-resources-for-getting-started-in-icsscada-cybersecurity/", "published_at": "2016-08-28T19:53:03+00:00" }, { "id": "01a0be04-aa92-73c7-8eb8-45501911595b", "title": "Intelligence Defined and its Impact on Cyber Threat Intelligence", "url": "https://www.robertmlee.org/intelligence-defined-and-its-impact-on-cyber-threat-intelligence/", "published_at": "2016-08-25T15:41:36+00:00" }, { "id": "01a0be0b-27d6-704c-8d3e-317c85658e93", "title": "Common Analyst Mistakes and Claims of Energy Company Targeting Malware", "url": "https://www.robertmlee.org/common-analyst-mistakes-and-claims-of-energy-company-targeting-malware/", "published_at": "2016-07-13T23:03:24+00:00" }, { "id": "01a0be0b-27d6-704c-8d3e-317c856ad3de", "title": "IRONGATE Malware – Lessons Learned for ICS/SCADA Defenders", "url": "https://www.robertmlee.org/irongate-malware/", "published_at": "2016-06-02T13:02:19+00:00" }, { "id": "01a0be0b-27d6-704c-8d3e-317c85901a60", "title": "Hype, Logical Fallacies, and SCADA Cyber Attacks", "url": "https://www.robertmlee.org/hype-logical-fallacies-and-scada-cyber-attacks/", "published_at": "2016-05-26T03:09:29+00:00" }, { "id": "01a0be0b-27d6-704c-8d3e-317c85dd6520", "title": "Detecting the S7 Worm and Similar Capabilities", "url": "https://www.robertmlee.org/detecting-the-s7-worm-and-similar-capabilities/", "published_at": "2016-05-08T19:28:38+00:00" }, { "id": "01a0be0b-27d6-704c-8d3e-317c86b343ff", "title": "Fourth Sample of ICS Tailored Malware Uncovered and the Potential Impact", "url": "https://www.robertmlee.org/fourth-sample-of-ics-tailored-malware-uncovered-and-the-potential-impact/", "published_at": "2016-04-25T17:26:04+00:00" }, { "id": "01a0be0b-27d6-704c-8d3e-317c86d8f440", "title": "The Problems with Seeking and Avoiding True Attribution to Cyber Attacks", "url": "https://www.robertmlee.org/the-problems-with-seeking-and-avoiding-true-attribution-to-cyber-attacks/", "published_at": "2016-03-04T06:24:16+00:00" }, { "id": "01a0be0b-27d6-704c-8d3e-317c878b3c6c", "title": "No, Norse is Not a Bellwether of the Threat Intel Industry but Does Hold Lessons Learned", "url": "https://www.robertmlee.org/no-norse-is-not-a-bellwether-of-the-threat-intel-industry-but-does-hold-lessons-learned/", "published_at": "2016-01-30T21:18:40+00:00" }, { "id": "01a0be0b-27d6-704c-8d3e-317c88483bfe", "title": "Context for the Claim of a Cyber Attack on the Israeli Electric Grid", "url": "https://www.robertmlee.org/context-for-the-claim-of-a-cyber-attack-on-the-israeli-electric-grid/", "published_at": "2016-01-27T02:55:23+00:00" } ] posts Claim your blog
Back to robertmlee.org
Blog · corpus.blog/blogs/robertmlee.org/posts

robertmlee.org

robertmlee.org

2025

Back in Military Service – From Blue to Greenoriginal ↗
3 Mar 2025

2022

My Reaction to the Bloomberg Article on Me and the 100 Day Action Planoriginal ↗
11 Jun 2022
Structuring Cyber Threat Intelligence Assessments: Musings and Recommendationsoriginal ↗
15 Jan 2022

2021

Cybersecurity Has Much to Learn from Industrial Safety Planningoriginal ↗
7 May 2021

2020

What a Record Setting Investment into the ICS/OT Cybersecurity Market Means to Meoriginal ↗
8 Dec 2020
The Department of Energy’s New Grid Resilience for National Security (GRNS) Subcommitteeoriginal ↗
30 Nov 2020
Should Governments Actively Defend Private Sector Networks?original ↗
7 Aug 2020
DISC: SANS ICS Virtual Conference and ICS CTF Event Detailsoriginal ↗
26 Apr 2020

2019

Claims of a Cyber Attack on Iran’s Abadan Oil Refinery and the Need for Root Cause Analysisoriginal ↗
20 Oct 2019
Goodbye Mike Assante, Thank you For Literally Everythingoriginal ↗
6 Jul 2019
Homogeneous Infrastructure and Scalable Attacksoriginal ↗
15 Jun 2019

2018

Attribution is not Transitive – Tribune Publishing Cyber Attack as a Case Studyoriginal ↗
31 Dec 2018
Threat Hunting, TTPs, Indicators, and MITRE ATT&CK – Bingooriginal ↗
25 Nov 2018
Hunting vs. Incident Response vs. Just Doing Your Joboriginal ↗
22 Nov 2018
What It’s Like to Raise Venture Capital (Just My Experience)original ↗
22 Nov 2018
What It’s Like to Testify to the U.S. Senateoriginal ↗
21 Jul 2018

2017

Russian Election Meddling, GRIZZLYSTEPPE, and Bananasoriginal ↗
17 Aug 2017
Marketing ICS Vulnerabilities and POC Malware – You’re Doing it Wrongoriginal ↗
30 Apr 2017

2016

Analytical Leaps and Wild Speculation in Recent Reports of Industrial Cyber Attacksoriginal ↗
31 Dec 2016
Critiques of the DHS/FBI’s GRIZZLY STEPPE Reportoriginal ↗
30 Dec 2016
New Suspected Cyber Attack on Ukraine Power Grid – Advice as Information Emergesoriginal ↗
19 Dec 2016
Threats of Cyber Attacks Against Russia: Rationale on Discussing Operations and the Precedent Setoriginal ↗
6 Nov 2016
A Collection of Resources for Getting Started in ICS/SCADA Cybersecurityoriginal ↗
28 Aug 2016
Intelligence Defined and its Impact on Cyber Threat Intelligenceoriginal ↗
25 Aug 2016
Common Analyst Mistakes and Claims of Energy Company Targeting Malwareoriginal ↗
13 Jul 2016
IRONGATE Malware – Lessons Learned for ICS/SCADA Defendersoriginal ↗
2 Jun 2016
Hype, Logical Fallacies, and SCADA Cyber Attacksoriginal ↗
26 May 2016
Detecting the S7 Worm and Similar Capabilitiesoriginal ↗
8 May 2016
Fourth Sample of ICS Tailored Malware Uncovered and the Potential Impactoriginal ↗
25 Apr 2016
The Problems with Seeking and Avoiding True Attribution to Cyber Attacksoriginal ↗
4 Mar 2016
No, Norse is Not a Bellwether of the Threat Intel Industry but Does Hold Lessons Learnedoriginal ↗
30 Jan 2016
Context for the Claim of a Cyber Attack on the Israeli Electric Gridoriginal ↗
27 Jan 2016