Books

A vendor-neutral, hands-on guide to proactive threat hunting: the assume-breach mindset, MITRE ATT&CK, core telemetry, and techniques like baselining, beaconing, and LOLBin detection, all backed by Sigma-rule pseudocode and four full scenario hunts from phishing to command-and-control exfiltration.

A practical guide to cyber threat intelligence, from raw indicators to strategic decisions. Learn the intelligence lifecycle, MITRE ATT&CK, STIX/TAXII/MISP, and intelligence-driven threat hunting, all traced through one real phishing campaign from first alert to CISO briefing.

Tens of thousands of vulnerabilities. A handful that actually matter. This book shows you how to build a risk-based vulnerability management program, from asset discovery and scanning to CVSS/EPSS/KEV prioritization, remediation workflows, cloud and container security, and zero-day response, complete with SLA matrices, scoring formulas, and a full Log4Shell case study.

A practical, hands on guide that walks SOC analysts, incident responders, and aspiring reverse engineers from a suspicious file to a defensible detection, covering static, dynamic, code, and memory analysis, unpacking, YARA, and real world reporting.

Running incidents is a technical problem under time pressure. Running the team that handles them is an organizational design problem, and most CSIRTs fail at exactly that gap. This handbook gives security leaders the charters, catalogs, playbooks, RACIs, and war room templates to build a CSIRT that survives its first real crisis, and the next one.

Discover the raw, unpolished reality of an American legend who transformed personal trauma into a masterclass in guerrilla warfare and strategic resistance. This immersive 56,000-word biography tracks the magnificent arc of an unbroken spirit, from the midnight swamps of the Underground Railroad to the command deck of a Union warship.

Prompt injection is the SQL injection of the AI era — and most LLM apps are wide open. This hands-on field manual shows application security engineers how to attack and defend LLM systems: direct, indirect, multimodal, and agentic injection, with working code, labs, and ASR benchmarks you can run in CI. Break it, then build the defense-in-depth that holds in production.

Grief brought James to Blackwood House, but the estate’s hunger is what will keep him there.In this slow-burn psychological horror, a decaying country manor doesn't just haunt its grieving new family—it studies them, feeds on them, and warps reality until they can no longer trust their own minds.Some secrets refuse to stay buried, and Blackwood House has been waiting for James to come home.

Product management has evolved beyond shipping features. The Scalable Product Manager reveals how modern leaders navigate complexity, align teams, design scalable systems, and drive sustainable growth. Packed with real-world lessons and frameworks, this book helps PMs move from tactical execution to strategic product leadership.

A practitioner's guide to running a modern SOC, from alert triage and detection engineering to SOAR automation and metrics that actually mean something. Includes real Sigma and KQL rules, a triage checklist, an escalation matrix, and a full worked phishing case from alert to closure.

Nine women. One burning hotel. No parachutes, no armor—only pillows, rubber bullets, and unbreakable sisterhood. From Parramatta’s golden suburbs to a night of blood and hammers, Parramatta Nine is a blazing tale of ordinary fire warriors who turned terror’s lair into their fortress of vengeance.

What if the perfect neighbour became the perfect nightmare? In the suburbs of Sydney, a celibate yogi turns poltergeist to silence envy and restore peace—one terrifying haunting at a time. A darkly funny, spiritually charged ghost story where astral architecture meets domestic horror.

Cyber threats evolve constantly, and effective defense starts with actionable intelligence. This book guides you from the fundamentals of cyber threat intelligence to advanced operational practices, providing practical frameworks, real-world examples, and proven techniques to help you turn threat data into stronger security decisions.

Build AI agents that do real work with the Google Agent Development Kit (ADK), Python, and Google Cloud. Through complete, runnable examples, you'll learn how to build, orchestrate, and deploy production-ready multi-agent systems with practical skills you can apply from day one.