Threat Intelligence
Threat Research
Investigating adversaries end to end — from an initial piece of intelligence, through the infrastructure and tooling behind a campaign, to the detections that catch it. Reports published here follow a consistent format: findings first, evidence shown, confidence stated.
Methodology
How I Investigate
The pipeline every report on this page follows. Each stage feeds the next, and the whole thing is pointed at one outcome: turning intelligence into a defensive change.