Yesterday, I tweeted asking people to share malware samples with me for analysis, for personal reasons.

MalOps.io Challenge Write-up Tracing persistence, encrypted payloads, shellcode execution, security bypasses, and C2 infrastructure

Welcome to this new Medium post. This one starts a series where we build a basic EDR driver from scratch to understand how EDRs collect…

Compiled code no longer functions as an impenetrable shell protecting JSCeal. Check Point specialists recently developed a fully static deobfuscation method. This innovative technique effectively …

Why patching isolated code paths fails when underlying OS architecture remains unchanged.

The first rule I gave myself: never open a sample in a debugger until I’ve asked the file some basic questions first.

But It’s Always a Question

Setting up a dedicated malware analysis lab requires absolute network isolation and a carefully structured environment. This comprehensive…

A room about analysing a series of maldocs.

A spoiler-free SOC investigation walkthrough