Resources
A short selection of what we use and what we look things up in, with the reasoning for each. Not an index of everything that exists: there are lists for that, and none of them tells you which entry deserves your time.
Ransomware resources
Family identification, free decryptors, group tracking and response frameworks. A short annotated selection, not an index of everything that exists.
View collection →11 resourcesOffensive AI and AI security
Agents that carry out intrusion tasks, and tools for attacking AI systems. Two different problems, and worth not conflating them.
View collection →21 resourcesRed team frameworks, tooling and reference
What we use and what we look things up in. Ordered by the point in an engagement where you need it, not by GitHub popularity.
View collection →16 resourcesMalware analysis and reverse engineering
Sample intelligence, detonation environments and static analysis tooling. What you need to get from “we have something odd” to an indicator the SOC can use.
View collection →Start with the scope
A thirty-minute conversation is enough to determine whether the engagement makes sense, which type fits and what order of magnitude it carries. No cost, no commitment.