Field notes

Research

Field notes from deep water. Adversary emulation, malware reverse engineering, threat intelligence, and hardware hacking, written for practitioners and anyone curious how attacks actually work.

Posts appear when something turns up that is worth writing up. The tooling built in the lab is documented here as it is built.

Tools Making Mako 1 min read

Meet: Mako

An autonomous, model-agnostic adversary emulation harness, and the start of its build log.

Threat intelligence 5 min read

Etherhide and Seek

How a ClickFix Campaign Turned Smart Contracts Into C2 Infrastructure

Follow the research.

Every new write-up, straight to your inbox. No noise.

RSS feed