Welcome
This site is meant to act as a brain dump of the various things that I come across over the years along with other information that I find useful as reference in my day to day. I want to be clear on what this is not. The information on this website does NOT contain any information that is proprietary or that can not be found with a little bit of google and elbow grease. I am publishing this site because I feel that others my find the content useful, it is first and foremost for me personally. I will aim to keep it as up to date as possible but things may get outdated and not be updated simply because I have not had the time.
There are a few sections across the site. As I write this there is a Forensics section, Threat Hunting section, and an Adversaries section. The content within is all some research and knowledge I’ve come across in my free time. A break down of what is in each section can be found below:
- Forensics: This is a collection of artifacts that I would use for quick reference in my forensic days. I wouldn’t expect it to be update too frequently. It is essentially the information that is available on the SANS red poster.
- Adversaries: I find adversary groups fascinating and when they have leaks I typically like to give them a read. That being said it takes time to read through some of these leaks and this is a recent endeavor. To assist with this I’m working on an AI project that will hopefully speed up this process but for now I’m taking my time with it.
- Threat Hunting: Last but not least there is a Threat Hunting section where I give ideas for Threat hunts along with a general rundown of what to expect if you hunt for this activity. I do leave some psuedo-code in there but there is some room for improvement with that, my hope is to just convey the logic of the hunt. You will occasionally see blank hunts this just means that I am currently working on filling out the details, but wanted to present the idea in case anyone had ideas.
Please enjoy the content!