PacketReconnaissance.Reconstruction.
A knowledge base and blog born from the early days of wireless and security testing — replaying packets into networks with Ixia and Spirent. Today it covers firewall technologies, cloud deployments, Microsoft 365 security, and automation across the full OSI stack.
Latest from the Blog
View all →
Palo Alto Firewall Platforms vs Prisma Access: A Five-Year ROI and TCO Analysis
A five-year ROI and TCO analysis comparing Palo Alto Networks firewalls (PA-400 through PA-7500) against Prisma Access across Commercial, Enterprise, and SLED customers, with break-even analysis and pre-sales qualification guidance.
AI Readiness and Microsoft Security: An Assessment-Led Approach to Modernization
An assessment-led approach to AI readiness and Microsoft security: converting AI adoption urgency and Microsoft security debt into documented risks, a prioritized modernization roadmap, and scoped services - with Purview, DLP, Copilot governance and licensing guidance throughout.
Post-Quantum Cryptography: A Market Opportunity for Security Advisors
Post-quantum cryptography is a present-day modernization opportunity: organizations need visibility into cryptographic dependencies and long-term data exposure before migration becomes urgent. A NIST-aligned assessment-first approach, with engagement packaging, qualification guidance and a 30/60/90-day plan.
Recent KB Articles
View all →Correlating Azure VNet Flow Logs with Microsoft 365 Security Telemetry (Part 2)
Part 2: Example correlation scenarios, KQL queries joining NTANetAnalytics with Entra and Defender telemetry, recommended implementation, and E3/E5 architectures.
Correlating Azure VNet Flow Logs with Microsoft 365 Security Telemetry (Part 1)
Part 1: Why Azure VNet flow logs gain their real value when correlated with Microsoft 365 and Azure identity, endpoint, email, and SaaS telemetry in Microsoft Sentinel -- plus the E3 and E5 correlation models.
SASE Product Comparison Matrix — August 2026
An August 2026 capability comparison of the five principal SASE platforms — Palo Alto, Netskope, Zscaler, Fortinet, and Cisco — across single-vendor SASE, SD-WAN, SSE, data security, and platform cohesion.
Certification Pro
Pursuing your CCIE, PCNSE, or CISSP? Expert-led training for Cisco, Palo Alto, Fortinet & cloud certifications.
Explore Certification TrainingSupport the Project
If you find this knowledge base helpful, consider supporting its continued growth.
Buy Me a Coffee
Support the project with a one-time tip.
Donations
Support the project with a one-time donation.
GitHub Sponsors
Coming soon — sponsor development on GitHub.
Coming Soon