# Investigations

Published articles for Investigations.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## Comparing Retrospectives

DevFeed: [Comparing Retrospectives](<https://devfeed.tech/articles/comparing-retrospectives-36733.md>)

Original publisher: [Read original article](<https://shostack.org/blog/comparing-retrospectives/>)

Author: Adam

Published: 2023-09-19T00:00:00Z

Content type: opinion

Language: en

Sources: [Shostack & Friends Blog](<https://devfeed.tech/sources/shostack-friends-blog.md>)

Topics: [retrospectives](<https://devfeed.tech/topics/retrospectives.md>), [Security](<https://devfeed.tech/topics/security.md>), [Architecture & Design](<https://devfeed.tech/topics/architecture-design.md>), [Microsoft](<https://devfeed.tech/topics/microsoft.md>)

Tags: [design](<https://devfeed.tech/tags/design.md>), [forensic](<https://devfeed.tech/tags/forensic.md>), [investigations](<https://devfeed.tech/tags/investigations.md>), [logs](<https://devfeed.tech/tags/logs.md>), [microsoft](<https://devfeed.tech/tags/microsoft.md>), [report](<https://devfeed.tech/tags/report.md>), [retention](<https://devfeed.tech/tags/retention.md>), [retrospectives](<https://devfeed.tech/tags/retrospectives.md>), [security](<https://devfeed.tech/tags/security.md>)

### AI overview

The article compares Microsoft's retrospective on the Storm-0558 key acquisition with Thornton Tomasetti's forensic investigation of the Arecibo Telescope collapse. It argues that retrospectives preserve authoritative accounts, support organizational learning, and reassure stakeholders, while contrasting the reports' length, authorship, and treatment of evidence. It also examines log retention as a security design choice.

### Source excerpt

We can learn a lot from comparing retrospectives

## Learning Lessons from Aviation

DevFeed: [Learning Lessons from Aviation](<https://devfeed.tech/articles/learning-lessons-from-aviation-36748.md>)

Original publisher: [Read original article](<https://shostack.org/blog/cyber-lessons-learned/>)

Author: Adam

Published: 2021-11-15T00:00:00Z

Content type: opinion

Language: en

Sources: [Shostack & Friends Blog](<https://devfeed.tech/sources/shostack-friends-blog.md>)

Topics: [Security](<https://devfeed.tech/topics/security.md>), [recommendations](<https://devfeed.tech/topics/recommendations.md>), [risk-management](<https://devfeed.tech/topics/risk-management.md>)

Tags: [aviation](<https://devfeed.tech/tags/aviation.md>), [investigations](<https://devfeed.tech/tags/investigations.md>), [recommendations](<https://devfeed.tech/tags/recommendations.md>), [report](<https://devfeed.tech/tags/report.md>), [research](<https://devfeed.tech/tags/research.md>), [security](<https://devfeed.tech/tags/security.md>), [third-party](<https://devfeed.tech/tags/third-party.md>)

### AI overview

The article discusses applying learning models from aviation to cybersecurity investigations. It describes a report examining what a cyber NTSB might be, recommends objective and independent investigations, and identifies research questions for further study.

### Source excerpt

The definition of insanity is doing the same thing over and over and expecting different results. We can do better, and a major new report explains how.

## The Case of the Missing PHP Session

DevFeed: [The Case of the Missing PHP Session](<https://devfeed.tech/articles/the-case-of-the-missing-php-session-31306.md>)

Original publisher: [Read original article](<https://nystudio107.com/blog/the-case-of-the-missing-php-session>)

Author: andrew@nystudio107.com (Andrew Welch)

Published: 2017-06-12T02:27:00Z

Content type: article

Language: en

Sources: [nystudio107 | Articles on modern web development.](<https://devfeed.tech/sources/nystudio107-articles-on-modern-web-development.md>)

Topics: [PHP](<https://devfeed.tech/topics/php.md>), [Content Management System](<https://devfeed.tech/topics/cms.md>), [Software as a service](<https://devfeed.tech/topics/saas.md>), [Ubuntu](<https://devfeed.tech/topics/ubuntu.md>), [data](<https://devfeed.tech/topics/data.md>)

Tags: [16-04](<https://devfeed.tech/tags/16-04.md>), [cms](<https://devfeed.tech/tags/cms.md>), [craft](<https://devfeed.tech/tags/craft.md>), [created](<https://devfeed.tech/tags/created.md>), [here-s](<https://devfeed.tech/tags/here-s.md>), [investigations](<https://devfeed.tech/tags/investigations.md>), [logging](<https://devfeed.tech/tags/logging.md>), [minutes](<https://devfeed.tech/tags/minutes.md>), [php](<https://devfeed.tech/tags/php.md>), [saas](<https://devfeed.tech/tags/saas.md>), [sessions](<https://devfeed.tech/tags/sessions.md>), [solved](<https://devfeed.tech/tags/solved.md>), [ubuntu](<https://devfeed.tech/tags/ubuntu.md>), [website](<https://devfeed.tech/tags/website.md>)

### AI overview

An investigation into why users of a Craft CMS SaaS website were logged out unexpectedly. The article explains that PHP sessions on Ubuntu expire after 24 minutes of inactivity by default, regardless of client-side session settings.

### Source excerpt

A SaaS website created with Craft CMS was logging out sessions after 30 minutes; here's how I solved it