Independent cybersecurity research on Windows internals, Active Directory, malware analysis, and offensive security techniques.https://dekingofcyber.com/enhttps://dekingofcyber.com/blog/reverse-engineering-malware-sample/https://dekingofcyber.com/blog/reverse-engineering-malware-sample/A real-world malware analysis case study of WannaCry, focusing on its SMBv1 propagation, kill switch behavior, and defensive lessons from the 2017 outbreak.Sat, 15 Nov 2025 00:00:00 GMTReverse EngineeringMalware AnalysisIncident ResponseSivabalan Chandra Sekaranhttps://dekingofcyber.com/blog/active-directory-kerberoasting/https://dekingofcyber.com/blog/active-directory-kerberoasting/A defender-focused deep dive into Kerberoasting mechanics, detection opportunities, and hardening recommendations for enterprise Active Directory environments.Tue, 28 Oct 2025 00:00:00 GMTActive DirectoryWindows InternalsSivabalan Chandra Sekaranhttps://dekingofcyber.com/blog/windows-token-abuse/https://dekingofcyber.com/blog/windows-token-abuse/Analyzing how Windows access tokens enable local privilege escalation through SeImpersonatePrivilege abuse and modern Potato-family exploits.Sat, 20 Sep 2025 00:00:00 GMTWindows InternalsPurple TeamSivabalan Chandra Sekaranhttps://dekingofcyber.com/blog/memory-analysis-volatility/https://dekingofcyber.com/blog/memory-analysis-volatility/Practical guide to memory forensics using Volatility 3 plugins to identify process injection, credential artifacts, and attacker tooling in RAM dumps.Tue, 12 Aug 2025 00:00:00 GMTMemory ForensicsDigital ForensicsIncident ResponseSivabalan Chandra Sekaranhttps://dekingofcyber.com/blog/building-yara-rules/https://dekingofcyber.com/blog/building-yara-rules/A practical framework for writing maintainable YARA rules that minimize false positives while catching real-world malware families.Sat, 05 Jul 2025 00:00:00 GMTDetection EngineeringMalware AnalysisThreat HuntingSivabalan Chandra Sekaranhttps://dekingofcyber.com/blog/linux-privilege-escalation/https://dekingofcyber.com/blog/linux-privilege-escalation/Systematic approach to identifying and exploiting common Linux privilege escalation vectors including SUID binaries, capabilities, and cron misconfigurations.Wed, 18 Jun 2025 00:00:00 GMTLinuxPurple TeamSivabalan Chandra Sekaranhttps://dekingofcyber.com/blog/web-cache-poisoning/https://dekingofcyber.com/blog/web-cache-poisoning/Technical analysis of web cache poisoning attacks leveraging unkeyed headers and cache key normalization differences between proxies and origin servers.Thu, 22 May 2025 00:00:00 GMTWeb SecurityThreat HuntingSivabalan Chandra Sekaranhttps://dekingofcyber.com/blog/cve-walkthrough/https://dekingofcyber.com/blog/cve-walkthrough/A real-world case study of Log4Shell, the Apache Log4j remote code execution vulnerability, with practical guidance for asset discovery, patching, and detection.Thu, 10 Apr 2025 00:00:00 GMTWeb SecurityCloud SecurityIncident ResponseSivabalan Chandra Sekaran