FIELD NOTES.
Write-ups on detection, forensics, range design, and evidence discipline. No hype, no filler — the same reasoning the Academy curriculum teaches.
- 2026.09.08#060
Container escape conditions and verification techniques
Container escapes can lead to significant security breaches. Knowing how to verify your environments against these conditions is critical for maintaining control.
containerssecurity-architecturered-teamblue-team10 MIN - 2026.09.08#059
Using MITRE ATT&CK as an analysis tool
Approaching MITRE ATT&CK not as a checklist but as a framework for deep analysis can enhance threat detection and incident response capabilities.
threat-huntingincident-responsedetection-engineeringmethodology8 MIN - 2026.09.08#058
Decoding stack traces like a detective
Stack traces can feel cryptic, but they hold vital clues about application failures. Learn to read them and improve your debugging skills.
programmingdebuggingincident-responseevidence-handling8 MIN - 2026.09.08#057
Isolated malware lab: unpacking behavior analysis
Behavior analysis in an isolated malware lab requires a structured approach. Missteps can lead to missed insights or worse, a compromised environment.
malware-analysissecurity-labsmethodologyincident-response10 MIN - 2026.09.08#056
Flattening the risks: network segmentation without disruption
Implementing network segmentation in a flat architecture can enhance security without halting business operations. Here's a practical approach.
networkingsecurity-architecturepenetration-testingincident-response7 MIN - 2026.09.08#055
Understanding public keys, private keys, and certificates
Public and private keys underpin much of today's secure communication. Dive into how they work with certificates, avoiding common pitfalls.
tlsauthenticationsecurity-architecturefundamentals8 MIN - 2026.09.08#054
Verifying PostgreSQL RLS policies in Supabase
Evaluating Row Level Security in Supabase involves testing assertions against RLS policies. Here’s how to ensure your policies are effectively enforced and not bypassed.
databasesauthorizationapi-securitymethodology10 MIN - 2026.09.08#053
Navigating the first two years of a security career
The first two years in cybersecurity can be overwhelming. Here’s a concrete approach to building skills that stick and avoiding common pitfalls.
careerfundamentalsred-teamblue-team7 MIN - 2026.09.07#052
What root actually means on Linux, and why uid 0 is not magic
Root access on Linux is often shrouded in myth. Let’s dissect what being root really entails and why UID 0 is more than just a number.
linuxprivilege-escalationsecurity-architecturefundamentals8 MIN - 2026.09.07#051
Privilege escalation on Windows: tokens, services, and ACLs
Windows privilege escalation often exploits token manipulation, service misconfigurations, and ACL vulnerabilities. Understanding these can turn a routine assessment into an escalated access nightmare.
windowsprivilege-escalationpowershellred-team10 MIN