Skip to content

Between the Alert and the Outcome

The sections follow the stages of a case. Detection ends where this begins.

About the blog that was here

This domain carried my personal technical blog from 2008 to 2015. Posts about .NET, Visual Studio, web development, and talks I gave around that time.

I have taken it down.

Why it is gone rather than archived

The posts themselves were fine and mostly obsolete — tooling from a decade ago, screenshots of versions nobody runs.

The comments were a different matter. They carried the email addresses and names of people who commented on a developer's blog fifteen years ago, and republishing those is not something I am willing to do on their behalf.

So the archive has gone in full, rather than partially.

If you followed a link here

From a profile of mine, a slide deck, or a search result: the old post is not here and is not coming back.

Some of it may be in web archives. I would rather you did not rely on it; most of it was accurate in 2012 and is not now.

What is here now

A collection of notes on how insider cases are handled: what happens between an alert and an outcome. It is published under the site's editorial name rather than mine, and the editorial page explains the position it takes.