Potentially unpopular take:

Attribution is a distraction.

Most orgs are not mature enough for attribution to actually differentiate response (just like honeypots).

Layer 8 is obsessed with attribution -- perhaps to make things more dramatic / urgent? -- so it persists.

So such things get chased, to the detriment of the basics.

Here's a bit of a peek into what I've been working on. Yes, this is a UI only an engineer could love.

Introducing Venture, a cross-platform Windows Event Log viewer written in Tauri (Rust + React). Venture allows you to review Windows log files on any platform you like, with easier search/filtering than the existing event viewer.

It's still early days, but I'm excited by what we have so far. It's also very fast, which I know evtvwr users will appreciate.

Still to do: make it pretty, add export options, and add tagging/flagging for events for easy review and reporting.

Mastodon: Bluesky is Bad, actually
Bluesky: Mastodon is Bad, actually

It’s like a shit version of West Side Story. how long before a Mastodon user and a Bluesky user fall in love while communicating exclusively over the fedi bridge