https://zypheron.net/blog Active Directory and identity security research, operator workflow playbooks, and release notes from Zypheron. For IT and security leads at 50 to 500 person companies. en-us https://zypheron.net/blog/first-30-minutes https://zypheron.net/blog/first-30-minutes From a fresh install to your first real finding: confirm the install, open a workspace, run one scan, and ground the AI in what you found. Thu, 28 May 2026 00:00:00 GMT https://zypheron.net/blog/recon-to-notes-to-report https://zypheron.net/blog/recon-to-notes-to-report A scanner, a graph tool, a terminal, a notes doc, and a report template. Five seams where context dies. What it looks like when the workspace carries the thread. Tue, 26 May 2026 00:00:00 GMT https://zypheron.net/blog/fragmented-stack-vs-workspace https://zypheron.net/blog/fragmented-stack-vs-workspace Not an argument that one app replaces your specialist tools. An argument that the gaps between them are where your time and findings leak out. Fri, 22 May 2026 00:00:00 GMT https://zypheron.net/blog/internal-teams-standardize-workflows https://zypheron.net/blog/internal-teams-standardize-workflows Repeatable coverage of Active Directory and identity weaknesses for a two or three person team, driven by ATT&CK profiles and shared findings. Wed, 20 May 2026 00:00:00 GMT https://zypheron.net/blog/install-and-forget-fails https://zypheron.net/blog/install-and-forget-fails Dashboards that run in the background and email a score are not the same as a workspace you operate. Why passive tooling fails the people doing the work. Mon, 18 May 2026 00:00:00 GMT https://zypheron.net/blog/zypheron-desktop-linux-ga https://zypheron.net/blog/zypheron-desktop-linux-ga The Cybersecurity IDE is generally available on Linux: AppImage, .deb, .rpm, GPG-signed and auto-updating. Free to download, no account required. Fri, 15 May 2026 00:00:00 GMT https://zypheron.net/blog/reverse-engineering-local-llm https://zypheron.net/blog/reverse-engineering-local-llm Headless Ghidra, hex preview, symbol extraction, and a local model that explains what it found. Same workspace, no egress required. Wed, 13 May 2026 00:00:00 GMT https://zypheron.net/blog/ad-cloud-attack-paths https://zypheron.net/blog/ad-cloud-attack-paths On-prem AD, Entra ID, and AWS/Azure/GCP trust in a single graph you can walk. Collapsing the identity boundary attackers ignore. Mon, 11 May 2026 00:00:00 GMT https://zypheron.net/blog/the-cybersecurity-ide https://zypheron.net/blog/the-cybersecurity-ide The case for one workspace instead of a graph tool, a terminal, a disassembler, and a notes doc. The thesis behind Zypheron Desktop. Sat, 09 May 2026 00:00:00 GMT https://zypheron.net/blog/zypheron-doctor-guide https://zypheron.net/blog/zypheron-doctor-guide The fastest path to diagnosing a broken install, missing dependencies, and local toolchain drift before you chase the wrong issue. Sun, 15 Mar 2026 00:00:00 GMT