What I learn while building, deploying and breaking things — DevOps, full stack development and malware research.
A lab walkthrough of classic remote thread injection, the telemetry it leaves behind, and a Sigma rule that flags it.
Sep 20, 2026 · 8 min read
How inline (trampoline) hooks redirect a function while keeping the original reachable — the core trick behind game trainers, API monitors and EDR hooks.
Oct 8, 2026 · 7 min read
Dependency audit, static analysis and secret scanning on every pull request, without slowing the team down.
Aug 14, 2026 · 6 min read
Using standalone output and a three-stage Dockerfile to ship a small production image that runs as a non-root user.
Jul 2, 2026 · 5 min read
A small guard function that keeps authorization in one place instead of scattered across every endpoint.
May 18, 2026 · 7 min read