https://ktalons.github.io/tags/talonsoclab/Recent content in TalonSocLab on Kyle VersluisHugoenSun, 09 Aug 2026 00:00:00 +0000https://ktalons.github.io/blog/phase-a-active-is-not-proof/Sun, 09 Aug 2026 00:00:00 +0000https://ktalons.github.io/blog/phase-a-active-is-not-proof/Phase A is complete: agents on three real endpoints, Suricata on the wire, and a SOC dashboard in git. The recurring lesson: Active is a liveness signal, not an acceptance test.https://ktalons.github.io/blog/phase-0-off-the-dongle/Fri, 24 Jul 2026 00:00:00 +0000https://ktalons.github.io/blog/phase-0-off-the-dongle/Phase 0 is complete: host hardened, stack green, backups proven, default credentials gone.https://ktalons.github.io/blog/talonsoclab-booting/Sat, 20 Jun 2026 00:00:00 +0000https://ktalons.github.io/blog/talonsoclab-booting/TalonSocLab stops being a plan: the hardware, the stack, and the phased buildout ahead.https://ktalons.github.io/blog/welcome/Wed, 20 May 2026 00:00:00 +0000https://ktalons.github.io/blog/welcome/A preview of the TalonSocLab buildout.