The field notes
Writing.
Investigations, experiments, and things learned.
015 min readBecoming a Detection Engineer, Part 2: Garbage In, Garbage Out026 min readBecoming a Detection Engineer, Part 1: Red Light, Green Light036 min readHow Email Finds Its Way and Who’s Allowed to Send It: MX and SPF Explained043 min readFrom DMG to Execution053 min readmacOS Login Item Persistence0620 min readOne Chokepoint, Three Loaders0710 min readWhere Does macOS EDR Telemetry Come From?089 min readSo You Want to Learn macOS Forensics?094 min readCracking a macOS Local Password Hash — A Hands-On Walkthrough107 min readThinking in Three Dimensions: How Security Analysts Can Balance Binary, Quantitative, and Qualitative Reasoning — A Think Piece119 min readScamware Analysis: FreeYoutubeDownloader.exe129 min readInside File Deletion: SSDs, SDelete, and Forensics1311 min readVerboten: Forensic CTF Walkthrough144 min readInvestigative Features in Microsoft Defender and Microsoft Sentinel for SOC Analysts154 min readPhish or Swim: Part 2164 min readPhish or Swim: Part 1173 min readLetsDefend — Remote Working183 min readLetsDefend — Memory Analysis196 min readMy PNPT Exam Experience206 min readMy Security Blue Team Level One Exam Experience215 min readLetsDefend — WinRAR 0-Day (CVE-2023–38831)225 min readLetsDefend -PDF Analysis231 min readMemLabs Lab 1: Beginner’s Luck
23 field notes · Always learning