Detection Engineering
Building Effective YARA Rules: From Strings to Production Detection
A practical framework for writing maintainable YARA rules that minimize false positives while catching real-world malware families.
2 min read
Threat Hunting
Hypothesis-driven hunting and adversary behavior mapping.
Web Security
Web Cache Poisoning: Exploiting HTTP Implementation Discrepancies
Technical analysis of web cache poisoning attacks leveraging unkeyed headers and cache key normalization differences between proxies and origin servers.
2 min read