Practical perspectives on red teaming, adversary emulation, cloud security, and building a career in cyber operations.
A walkthrough of building a position-independent shellcode loader in Go, and the design choices that help it slip past modern EDR.
Skip the weeks of perimeter testing — assumed-breach scoping focuses budget on the detection and response questions that matter.
Identity is the new perimeter. A field guide to enumerating and chaining cloud privilege escalation paths.
A structured approach to building hunt hypotheses grounded in adversary behavior rather than tool alerts.
How to emulate the highest-impact ransomware TTPs in production without the blast radius.
How the discipline, analytic rigor, and mission focus of military intelligence translate directly into a red team career.
Whether it's an engagement or a hard question, the door is open. Reach out and let's talk.