I made a post that goes through the details and thought process behind writing a ransomware payload for training purposes. It goes over how the entire killchain works and how each component is written as well as defense evasion techniques employed throughout the process. Finally, it goes over how to automate the killchain so that it is reliable and repeatable.

A small fuzzer designed to test BIOS Services and Port IO for old MBR-based hosts.

My team recently released v1.0 of our open source security data pipeline toolkit — if you’re currently using or interested in systems like Cribl or Logstash, check it out!