Archive

Research

Incident teardowns, detection engineering, reverse engineering and network forensics.

How an operator thinks, and what that leaves behind. Why they picked the tool they picked, the working hours their infrastructure keeps, and the OpSec habit that held for eleven hosts and then did not.