Resources

Research, field notes, and live sessions on understanding attacks and validating your defenses.

August 17, 20263 min read

Temporary Access Passes: What Can Outlive the Recovery Window?

August 14, 20266 min read

What Can Sign-In Records Tell You About an Incident?

August 12, 20264 min read

What Does an MFA Claim Actually Tell You?

August 10, 20263 min read

You Signed In. What Are You Allowed to Do?

August 5–6, 2026Las Vegas, NV

GhostEye at Black Hat USA 2026

August 4, 20265 min read

Tokens and Session Cookies: What Keeps You Signed In?

August 3, 20264 min read

Primary Refresh Tokens: How Microsoft Entra SSO Works

GhostEye Research

July 14, 20264 min read

Which Social Engineering Workflow Should You Test First?

GhostEye Research

July 8, 20264 min read

An Attack Hit Your Sector. What Should You Test?

GhostEye Research

July 6, 20264 min read

What Public Information Reveals About Your People

GhostEye Research

July 2, 20264 min read

Security Awareness Needs Evidence Beyond Completion

May 29, 2026Harrisburg, PA

GhostEye at BSides Harrisburg 2026

Your first campaign is on us.

Run a campaign, review what happened, and decide what to fix. Agree on the people, systems, and stopping point before testing starts.

Request Your Free Campaign