~/writing/security
Security.
Threat intelligence, malware, and the work of understanding adversaries.
No entries match that search.
The Mistaken PowDesk Threat Intel
How legitimate software was mistaken for malware, and how that attribution spread through threat intelligence.
Golang Detection Notes
Experiments with Go binaries, string storage, and YARA signatures across platforms and CPU architectures.
How to do good work in Cyber Threat Intelligence
Four ideas for producing defensible, useful intelligence and helping an entire team do better work.
Omnipotent adversary fallacy — should you give up your asymmetric advantages in cyber threat intel?
What defenders give up when they assume an adversary can see and do everything.
Common Cyber Threat Intel Biases
Recognizing the habits and assumptions that can quietly distort an intelligence assessment.
YARA hunting in ancient civilizations
Early YARA detection work, sharing analyst knowledge, and why a readable rule language mattered more than technical superiority.
Pragmatic Detection of GAN Profiles
Practical techniques for identifying synthetic profile photos, with examples and limitations.
LinkedIn GAN Network Analysis
Following connections through a network of likely inauthentic LinkedIn profiles.