DESIGN PHASE
Secure Architecture & Threat Modeling
Threat modeling using STRIDE and MITRE ATT&CK frameworks. Data flow analysis, trust boundary mapping, and abuse case development to identify design-level vulnerabilities before code is written.
Tools I use
STRIDEMITRE ATT&CKMicrosoft TMTOWASP ASVS
Related projects
SECURE ARCHITECTURE
Microservices Threat Model & Security Control Map
DETECTION ENGINEERING
Detection-as-Code: SIEM Correlation Pipeline