FIELD NOTES.
Write-ups on detection, forensics, range design, and evidence discipline. No hype, no filler — the same reasoning the Academy curriculum teaches.
- 2026.10.07#196
Streamlining external scanning workflows for application security
Optimizing external scanning can help identify vulnerabilities more efficiently. Here’s how to refine your workflow for better results.
web-securityburp-suitepenetration-testingmethodology10 MIN - 2026.10.06#195
Firmware security: Extracting and modifying SPI flash ROMs with flashrom and binwalk
Firmware extraction and modification can reveal vulnerabilities. This guide details the technical steps using flashrom and binwalk for SPI flash ROMs.
hardware-securitylinuxpenetration-testingmethodology12 MIN - 2026.10.05#194
Inspecting encrypted DNS with DoH and DoT
Understanding DNS over HTTPS (DoH) and DNS over TLS (DoT) is essential for inspection in modern networks. Here's how to decrypt and analyze them.
dnsnetworkingsecurity-labsincident-response12 MIN - 2026.10.04#193
Understanding inodes and file management in Unix filesystems
Inodes are the backbone of file management in Unix. Understanding how they work is essential for effective file deletion and recovery.
linuxfilesystemsdigital-forensicsfundamentals12 MIN - 2026.10.03#192
Managing GitHub token permissions in CI/CD workflows
Understanding and managing GitHub token permissions is critical for CI/CD security. This article covers CI/CD pipeline security, SLSA provenance, and Cosign signatures.
ci-cdgithubopseccloud-security10 MIN - 2026.10.02#191
GraphQL security assessment: introspection and query complexity
Assessing GraphQL security requires understanding introspection, query complexity, and batching attacks. This guide outlines practical steps for effective evaluation.
api-securityweb-securitypenetration-testingsecurity-architecture10 MIN - 2026.10.02#190
Understanding Windows ALPC and RPC internals for inter-process security
Windows ALPC and RPC mechanisms dictate local inter-process communication security. Understanding these internals can reveal critical insights for securing your systems.
windowssecurity-architectureprivilege-escalationmethodology12 MIN - 2026.10.02#189
Exploring Windows ALPC and RPC internals for local inter-process security
Windows handles inter-process communication through ALPC and RPC. Understanding these mechanisms reveals significant insights into local security models and permission settings.
windowssecurity-architecturemethodologyprivilege-escalation12 MIN - 2026.09.30#188
Assessing vendor claims about self-improving SOCs
Many vendors tout self-improving SOC capabilities, but how do you verify these claims? Here’s a practical workflow to assess their credibility.
threat-huntingsoc-operationsdetection-engineeringincident-response12 MIN - 2026.09.30#187
Crafting actionable findings for developers
Producing findings that developers can act on requires clarity and precision. This guide provides a workflow to enhance your reporting processes.
reportingincident-responsemethodologysecurity-labs10 MIN