Lab Note
Rebuilding the lab around the feedback loop, not the tooling
Six months of a detection lab that was impressive to look at and useless to work in, and the four changes that fixed it.
Archive
Research
Incident teardowns, detection engineering, reverse engineering and network forensics. Filtered to methodology.