Reverse engineering, incident response, and defensive tradecraft with enough detail to be useful.

Long-form writeups from actual investigations, malware reversing, protocol abuse, and hardening work.