Blog

Active game library — detection writeups, adversary infra research, deception, and threat hunting.

#01 Detection Chokepoints: Starting from Scratch A free, open knowledge base built around one question: what can't the attacker avoid? Anchor your detections there in... 2026.06.01 #02 Inside a Chokepoint Entry: A ClickFix Walkthrough A guided tour of a Detection Chokepoints entry, section by section, using ClickFix as the example. What each part of ... 2026.06.08 #03 Convergence Is Architecture, Not Coincidence A section-by-section read of the ransomware attack chain: the overlap graph where five actors collapse to three cells... 2026.06.25 #04 Reading the Wave: A Tour of Detection Chokepoints Trends Chokepoints tell you what has to happen. Trends show how attackers are changing the route around it. A tour of the Cl... 2026.07.17