Blog

Active game library — detection writeups, adversary infra research, deception, and threat hunting.

#01 Detection Chokepoints: Starting from Scratch A free, open knowledge base built around one question: what can't the attacker avoid? Anchor your detections there in... 2026.06.01 #02 Inside a Chokepoint Entry: A ClickFix Walkthrough A guided tour of a Detection Chokepoints entry, section by section, using ClickFix as the example. What each part of ... 2026.06.08 #03 Convergence Is Architecture, Not Coincidence A section-by-section read of the ransomware attack chain: the overlap graph where five actors collapse to three cells... 2026.06.25