Posts

Disrupting Contagious Interview

Platform-level threat intelligence on Contagious Interview, covering attacker infrastructure, tradecraft, and our efforts to disrupt the campaign. Includes 1,000+ IOCs.

Windows Dead Box (Disk Image) Forensics

My notes on finding and analyzing useful DFIR artifacts in a Windows disk image.

Reverse Engineering: Malware Analysis of Ursnif

Following an Ursnif sample from its first execution through unpacking and process injection.

Combining Multiple Design Patterns in Java

Design patterns in a mock system built with Java.

Page Tables, Implementing Shebang, and Integer Overflow in Xv6

Notes on page tables, shebang handling, and integer overflow exercises in the xv6 operating system.