reads
a quiet log of what's been catching my attention — hover a day to see what i was reading.
octnovdecjanfebmaraprmayjunjulaugsepoct
quieter
louder
julaugsepoct
quieter
louder
most recent
- 10hr Course Resource Tracker a ten-hour Claude Code course cut into chapters, timestamps and standalone videos. the spreadsheet is the honest part: nobody watches ten hours straight, they come back for chapter six.
- Agent Arena | AI Agent Performance Leaderboard ranked on live sessions instead of a fixed test set: task success, error recovery, tool hallucination. a leaderboard built from people getting annoyed in real time is harder to study for.
- Ridter (evi1cg) noPac, impacket forks, years of intranet notes, under a bio about staying unmoved by praise or blame. the offensive side of the commit graph, and a calmer one than mine.
- WMI Malware: The Complete Forensics Guide persistence that never touches disk as a file, living inside a feature every Windows box ships with. file scanning has nothing to say here; the event subscriptions do.
- LOTTunnels LOLBAS, but for tunnels: bore, serveo, dev tunnels, each one a legitimate way to expose a port and an easy way out with your data. the allow-list question just got longer.
- DFIR Next Steps: What to Do After You Find a Suspicious Use of Certutil.exe finding the certutil download is the easy part. what you check in the next ten minutes decides whether it was an admin or the first step of something longer.
- Mshta | LOLBAS a signed Microsoft binary that runs whatever script you hand it, remote or local. the trust is in the signature, not in what it executes.
- DetectForge detection rules treated like code: backtested, replayed against benign noise, scored for staleness. most alert fatigue starts with a rule nobody tested before it shipped.