Incident Response

Containment, eradication, and post-incident analysis.

Reverse Engineering

WannaCry Ransomware: Static Triage, Kill Switch Logic, and MS17-010 Lessons

A real-world malware analysis case study of WannaCry, focusing on its SMBv1 propagation, kill switch behavior, and defensive lessons from the 2017 outbreak.

Nov 15, 20254 min read

Memory Forensics

Memory Analysis with Volatility 3: Recovering Artifacts from a Compromised Host

Practical guide to memory forensics using Volatility 3 plugins to identify process injection, credential artifacts, and attacker tooling in RAM dumps.

Aug 12, 20252 min read

Web Security

CVE-2021-44228 Log4Shell: Root Cause, Exposure Mapping, and Detection

A real-world case study of Log4Shell, the Apache Log4j remote code execution vulnerability, with practical guidance for asset discovery, patching, and detection.

Apr 10, 20254 min read