NAME

tags

- Browse articles by topic and technology.

INDEX

AI tooling

  1. Giving Every macOS App a Security Passport
  2. The Last Engineer in the Loop
  3. Prolog is dead, long live Prolog!
  4. The Agentic Performance Ladder: Python, Native Kernels, and Metal
  5. IDA Free on Steroids: Automating Reverse Engineering with IDC and Codex
  6. Grill me with ASCII
  7. How I contain OSS supply-chain risk with Apple Containers

Apple Containers

  1. Running NetBSD OCI images with Apple Container
  2. OCI fundamentals: images, layers and registries
  3. Detecting Apple Container from inside the guest
  4. How I contain OSS supply-chain risk with Apple Containers

AWS

  1. Preparing for AWS SAA-C03 with a final review guide

cloud architecture

  1. Preparing for AWS SAA-C03 with a final review guide

engineering

  1. The Last Engineer in the Loop
  2. From Problem to Operations: An Engineering Workflow for Security Teams

FreeBSD

  1. Earning the BSD Specialist certification
  2. Preparing for BSD Specialist with a one-page cheat sheet
  3. Adopting a FreeBSD port
  4. One BSD’s fix is another BSD’s bug
  5. Provoke a kernel panic in FreeBSD

fuzzing

  1. Trap fuzzing: random instructions, real bugs

GitHub

  1. Preparing for GH-500 with a final review guide

GitHub Advanced Security

  1. Preparing for GH-500 with a final review guide

IDA

  1. IDA Free on Steroids: Automating Reverse Engineering with IDC and Codex

incident response

  1. From Problem to Operations: An Engineering Workflow for Security Teams
  2. Never upload ransomware samples to the Internet

macOS

  1. Running NetBSD OCI images with Apple Container
  2. Moving NetBSD on Apple VZ from direct boot to EFI
  3. If NetBSD runs on a toaster, it must run on Apple VZ: Porting NetBSD to yet another platform
  4. Build a tiny Linux VM with Apple VZ
  5. Detecting Apple Container from inside the guest
  6. Giving Every macOS App a Security Passport
  7. The Agentic Performance Ladder: Python, Native Kernels, and Metal
  8. How to write and load shellcode on macOS

malware analysis

  1. From forty dots to an entropy map
  2. What lives after the last PE section?
  3. Detect API hashing with YARA
  4. Learn how to fix PE magic numbers with Malduck
  5. The malware analyst's guide to PE timestamps
  6. The malware analyst's guide to aPLib decompression
  7. The malware analyst's guide to zlib compression
  8. Never upload ransomware samples to the Internet
  9. How to patch a Windows API in x64dbg
  10. Learn to quickly detect RC4 encryption in (malicious) binaries

mentoring

  1. From Problem to Operations: An Engineering Workflow for Security Teams

Microsoft Sentinel

  1. Passing Microsoft SC-200: Exam and KQL Reference Guides

NetBSD

  1. Running NetBSD OCI images with Apple Container
  2. Earning the BSD Specialist certification
  3. OCI fundamentals: images, layers and registries
  4. Moving NetBSD on Apple VZ from direct boot to EFI
  5. Preparing for BSD Specialist with a one-page cheat sheet
  6. If NetBSD runs on a toaster, it must run on Apple VZ: Porting NetBSD to yet another platform
  7. One BSD’s fix is another BSD’s bug

OCI

  1. Running NetBSD OCI images with Apple Container
  2. OCI fundamentals: images, layers and registries

open source

  1. Adopting a FreeBSD port

OpenBSD

  1. Earning the BSD Specialist certification
  2. Preparing for BSD Specialist with a one-page cheat sheet
  3. One BSD’s fix is another BSD’s bug

product security

  1. Adopting a FreeBSD port

Prolog

  1. Prolog is dead, long live Prolog!

reverse engineering

  1. From forty dots to an entropy map
  2. What lives after the last PE section?
  3. Prolog is dead, long live Prolog!
  4. The Agentic Performance Ladder: Python, Native Kernels, and Metal
  5. IDA Free on Steroids: Automating Reverse Engineering with IDC and Codex
  6. Detect API hashing with YARA
  7. Learn how to fix PE magic numbers with Malduck
  8. The malware analyst's guide to PE timestamps
  9. The malware analyst's guide to aPLib decompression
  10. The malware analyst's guide to zlib compression
  11. How to patch a Windows API in x64dbg
  12. Learn to quickly detect RC4 encryption in (malicious) binaries
  13. How to write and load shellcode on macOS

security operations

  1. Passing Microsoft SC-200: Exam and KQL Reference Guides

site notes

  1. Finding things on this blog got easier
  2. It's always DNS
  3. Hello, world, again

skill development

  1. The Last Engineer in the Loop

software supply chain

  1. Preparing for GH-500 with a final review guide
  2. Adopting a FreeBSD port
  3. How I contain OSS supply-chain risk with Apple Containers

systems security

  1. Running NetBSD OCI images with Apple Container
  2. Earning the BSD Specialist certification
  3. OCI fundamentals: images, layers and registries
  4. Preparing for BSD Specialist with a one-page cheat sheet
  5. Preparing for GH-500 with a final review guide
  6. Preparing for AWS SAA-C03 with a final review guide
  7. Trap fuzzing: random instructions, real bugs
  8. One BSD’s fix is another BSD’s bug
  9. Giving Every macOS App a Security Passport
  10. Provoke a kernel panic in FreeBSD
  11. How to write and load shellcode on macOS

threat hunting

  1. Passing Microsoft SC-200: Exam and KQL Reference Guides
  2. VirusTotal Hunting Cheat Sheet

virtualization

  1. Running NetBSD OCI images with Apple Container
  2. Moving NetBSD on Apple VZ from direct boot to EFI
  3. If NetBSD runs on a toaster, it must run on Apple VZ: Porting NetBSD to yet another platform
  4. Build a tiny Linux VM with Apple VZ
  5. Detecting Apple Container from inside the guest
  6. Trap fuzzing: random instructions, real bugs

VirusTotal

  1. VirusTotal Hunting Cheat Sheet
  2. Never upload ransomware samples to the Internet

Windows

  1. What lives after the last PE section?
  2. Learn how to fix PE magic numbers with Malduck
  3. The malware analyst's guide to PE timestamps
  4. How to patch a Windows API in x64dbg

YARA

  1. Detect API hashing with YARA
  2. Learn to quickly detect RC4 encryption in (malicious) binaries