Threat intelligence on the groups exploiting edge devices, Linux and ESXi: actor profiles whose infrastructure is re-checked every day, tested detection content, and write-ups from the hunting behind them. Delivered as STIX 2.1 for OpenCTI, MISP or any TAXII client.
Posts
All posts-
What this site is
A security engineer's notebook on critical infrastructure, attribution, and digital rights — and what I'm using it for.