BUILDINGACTIVEloupeBuilding PE parsing, import-table patching, and Unicorn-based emulation scaffolding.STUDYINGACTIVEProcess InjectionStudying Windows API patterns for allocating, writing, and executing code in remote processes.STUDYINGACTIVEWindows internalsStudying process, memory, and execution models behind Windows user-mode behavior.
INDEX / RECENT RECORDS3 PUBLIC RECORDS
IDCLASSSUBJECTSTATUSDATE
PRJ-001SOFTWAREloupe
emulation-based malware deobfuscator and unpacker
ACTIVEPRJ-002SOFTWAREnox
Go-based IDS with MITRE ATT&CK mapping
COMPLETEREF-001REFERENCEcanon
texts, people, and ideas that form the bedrock of how I work and why
PERMANENT