Identity · Security · Cloud · Automationhttps://newcombe.dev/https://newcombe.dev/articles/ad-account-lockouts-powershell/https://newcombe.dev/articles/ad-account-lockouts-powershell/Use events 4740 and 4625 together to move from 'the account keeps locking' to a timeline that identifies the source device, logon type and stale credential.Sat, 08 Aug 2026 00:00:00 GMThttps://newcombe.dev/articles/ad-missing-sites-services-subnets/https://newcombe.dev/articles/ad-missing-sites-services-subnets/NO_CLIENT_SITE entries in Netlogon logs are useful evidence that client networks are not mapped cleanly to Active Directory sites. PowerShell can turn the logs into a subnet-hygiene report.Sat, 08 Aug 2026 00:00:00 GMThttps://newcombe.dev/articles/browser-centric-vs-network-centric-zero-trust/https://newcombe.dev/articles/browser-centric-vs-network-centric-zero-trust/Enterprise browsers move enforcement into the user session. Network-centric Zero Trust still owns critical controls such as DNS, routing and non-browser traffic. The interesting architecture is often the combination.Sat, 08 Aug 2026 00:00:00 GMThttps://newcombe.dev/articles/designing-zero-trust-for-failure/https://newcombe.dev/articles/designing-zero-trust-for-failure/Zero Trust is not resilient just because it is cloud-hosted. Identity, posture, policy, tunnels, DNS and SaaS authentication all create failure domains that need deliberate recovery paths.Sat, 08 Aug 2026 00:00:00 GMThttps://newcombe.dev/articles/dynamic-cloudflare-lists-from-cloud-provider-ranges/https://newcombe.dev/articles/dynamic-cloudflare-lists-from-cloud-provider-ranges/A practical pattern for consuming AWS/Azure network feeds, calculating desired state and safely synchronising Cloudflare Zero Trust lists with PowerShell.Sat, 08 Aug 2026 00:00:00 GMThttps://newcombe.dev/articles/generated-warp-split-tunnels-and-fallback-domains/https://newcombe.dev/articles/generated-warp-split-tunnels-and-fallback-domains/When private sites and DNS exceptions multiply, WARP device-profile configuration becomes data. Source control can become the input and PowerShell the generator.Sat, 08 Aug 2026 00:00:00 GMThttps://newcombe.dev/articles/how-i-prepared-for-cissp-and-ccsp/https://newcombe.dev/articles/how-i-prepared-for-cissp-and-ccsp/The study approach I used for CISSP and CCSP: ISC2 official material, instructor-led training, practice questions, Pete Zerger's Last Mile resources, and more than 20 years of practical experience.Sat, 08 Aug 2026 00:00:00 GMThttps://newcombe.dev/articles/safe-cloudflare-zero-trust-deployment-pipelines/https://newcombe.dev/articles/safe-cloudflare-zero-trust-deployment-pipelines/As Zero Trust policy grows, the engineering problem shifts from configuring a dashboard to safely compiling, validating and deploying policy across environments.Sat, 08 Aug 2026 00:00:00 GMThttps://newcombe.dev/articles/why-ip-based-egress-steering-does-not-scale/https://newcombe.dev/articles/why-ip-based-egress-steering-does-not-scale/Static IP and subnet rules become fragile when SaaS platforms and CDNs move underneath you. Domain-aware egress policy aligns network controls with application intent.Sat, 08 Aug 2026 00:00:00 GMT