The habit of checking is the part that transfers.
The part of this work that is hardest to pick up from a certification syllabus is asking what a claim rests on before accepting it. That is most of what I have to teach, and it is useful well beyond security.
I taught cyber threat intelligence and information security there.
of teaching
Feb 2025 to Aug 2026
2 on record. Older sessions are not all documented.
The post above ran to a syllabus and a timetable. These are single sessions, delivered on invitation. Where a date or a link was not recovered, the entry says so rather than filling the space.
LOCUS 2023, Institute of Engineering, Pulchowk Campus
A talk on the current threat landscape and the case for converged SIEM, given at Nepal's largest engineering tech fest while I was Head of Security Research at Logpoint.
No recording or write-up recovered.
Herald College Kathmandu, with inRed Labs
A session for students on what it means to test a security product against a published methodology, rather than taking a vendor's claims at face value.
No recording or write-up recovered.
Subjects I can build a session around, drawn from the validation work at SecureIQLab and the research in The Lab.
This is an offer, not a record. The sessions that have actually been delivered are the two listed above.
What it means to test a security product against a published methodology, and why a vendor’s own numbers are not evidence.
What is actually changing in the landscape, and what converging detection and response onto one platform does and does not solve.
What the path looks like without a foreign degree, which parts of the certification circuit are worth the money, and what to build instead.
A roadmap for the first security job, a home lab build, and an incident report template are the three I get asked for most. None of them are written yet, and a stub of each is not worth publishing.
Conferences, colleges, meetups and cybersecurity communities.
Get in touch