Field Notes

Research and deep dives.

Working notes from assessments, lab research, and the tooling we build. Written in plain language, backed by evidence, and short on hype.

• Black Lantern Labs Team  ·  Security Testing

  If It Cannot Be Reproduced, It Does Not Go in the Report

  Before anyone attacks an organization, they look for a soft place to stand. Before a finding belongs in a report, it should meet the same standard: a path a skilled operator can walk again on purpose.

• Black Lantern Labs Team  ·  Monitoring & triage

  Monitoring Is Easy. Triage Is the Job.

  Continuous collection is the easy part of "watching" an environment. Logs arrive. Scanners chirp. Dashboards stay green until they are not. The work that actually reduces risk is slower and less phot…

• Black Lantern Labs Team  ·  Research

  What Your Organization Shows the Internet

  Before anyone attacks an organization, they look it up. Not with exotic tools or insider access. With public records: DNS entries, certificate logs, search engines, and data that services publish abo…

• Black Lantern Labs Team  ·  Deep Dive

  Lookalike Domains: The Attack Your Filters Miss

  Take your company's domain and swap one character. Replace an l with a capital I, an o with a zero, or add an s at the end. Most people reading quickly cannot tell the difference. Neither can your cu…

• Black Lantern Labs Team  ·  Advisory

  The Security Questionnaire Is a Sales Document

  Somewhere in a pipeline, a deal stalls because a security questionnaire sits unanswered. Not because every question is hard, but because nobody owns the document. Sales cannot answer it. Engineering…

• Black Lantern Labs Team  ·  Research

  What a Penetration Test Should Give You

  A lot of what gets labeled penetration testing is a vulnerability scan with a cover page. The scanner runs, findings land in a template, and you receive a long document that nobody reads and nothing…