Memory Scanning for the Masses

4 min read · 2024-01-25

Reverse, Reveal, Recover: Windows Defender Quarantine Forensics

22 min read · 2023-12-14

I'm in your hypervisor, collecting your evidence

10 min read · 2022-10-18

A brief look at Windows telemetry: CIT aka Customer Interaction Tracker

24 min read · 2022-04-12

Small effort, big reward

2 min read · 2022-03-17