5 min
NIS2 Directive: What Norwegian Businesses Need to Know in 2026
NIS2 sets stricter cybersecurity requirements for critical infrastructure. Here's what your organization needs to do to become compliant.
Blog
Cybersecurity insights, trends, and guidance for Norwegian businesses
6 min
Ransomware Trends in Norway: How to Protect Your Organization
Ransomware attacks on Norwegian businesses are increasing. Learn about the latest trends and concrete measures to protect your organization.
7 min
How to Build an Incident Response Plan That Actually Works
An incident response plan is worthless if nobody knows how to use it. Here's a practical guide to building a plan that works under pressure.
8 min
Detection Engineering with Sigma: From Rule to Production
Sigma rules are the standard for platform-agnostic threat detection. Here's how to build an effective detection program with detection-as-code.
7 min
Microsoft Sentinel: Building a Cloud-Native SOC From Scratch
Traditional SIEM solutions struggle with scaling and maintenance. Microsoft Sentinel offers a cloud-native approach that changes how we build security operations centers.
8 min
KQL for Security Teams: A Practical Guide to Threat Hunting
Kusto Query Language is the most powerful tool in the Sentinel arsenal. Here are practical KQL queries you can use for threat hunting today.
7 min
Azure Security Configuration: The 10 Most Common Mistakes
We see the same security mistakes in Azure environments time after time. Here are the 10 most common — and how to fix them.
8 min
MITRE ATT&CK in Practice: Mapping Your Detection Coverage
MITRE ATT&CK is more than a framework — it's a map of adversary behavior. Here's how to use it to measure and improve your detection capabilities.
6 min
Security Monitoring as Process: From Alert to Action
Tools alone don't provide security. It's the processes around them that determine whether alerts become action or just noise.
7 min
Entra ID and Conditional Access: Zero Trust Architecture in Practice
Zero Trust is more than a buzzword. With Entra ID and Conditional Access you can implement real zero trust security — here's how.
7 min
Microsoft Defender for Endpoint: XDR in Practice
Endpoint protection is about more than antivirus. Here's how to use Microsoft Defender for Endpoint as part of a comprehensive XDR strategy.
8 min
Active Directory Hardening: Protecting the Foundation of Your IT Environment
Active Directory remains the attacker's favorite target. Here's how to harden your AD environment to stop lateral movement and privilege escalation.
7 min
Threat Intelligence in Practice: From Data to Decisions
Threat intelligence is more than IOC feeds. Here's how to turn threat information into actionable decisions for your security team.
7 min
Log Strategy for Sentinel: What Should You Collect?
Collecting everything is expensive and pointless. A good log strategy is about prioritizing the right sources for detection and investigation.
6 min
Email Security and Phishing Defense: Defense in Depth
Email remains attack vector number one. Here's how to build a layered defense that catches phishing before it reaches users — and handles what gets through.
7 min
SOC Automation with SOAR: Playbooks That Scale Your Security Team
Security teams drown in manual tasks. SOAR playbooks in Sentinel automate the repetitive, so analysts can focus on what matters.