Advisories.
Concrete guidance on what to deploy, how to configure it, what it misses, and what to do about the gaps.
-
Detection engineeringAug 2026→
Why attackers kill ETW before they do anything else.
Event Tracing for Windows is the single most powerful telemetry source on a Windows endpoint. Five ETW-silencing tricks, and the strategy that turns log tampering into a definitive attack signal.
-
Active defenseIn progressComing soon
Decoy networks for small teams: low cost, zero noise.
Setting up high-fidelity traps without blowing budgets or drowning in false alarms.