Articles
Notes from active engagements, training exercises, and post-incident review. Updated whenever the day allows.
Blue Team Operations
Defenders. Monitors. Responders. The first and last line.
Red Team Operations
Adversary simulation. Real attacks, controlled outcomes.
Reconnaissance
Stage 1: Know your target before you touch it.
Payload Engineering
The code that runs on the target after the door opens.
Purple Team Exercises
Red and Blue, working together in real time.
Malware Categories
Taxonomy of the threats you'll see in the wild.
Threat Hunting
Proactive searching for threats already inside the network.
The Attack Lifecycle — 7 Stages
Lockheed Martin's Cyber Kill Chain, explained.
Social Engineering
The human is always the weakest link.
Incident Response Lifecycle
When something is on fire, how do you put it out?
Digital Forensics
Reconstruct what happened, from what was left behind.