1 July 2026
CyberDefenders Zerologon Write-up
DFIR write-up covering phishing delivery, Defender tampering, C2, discovery, lateral movement, AnyDesk, credential access, and collection.
Read moreReverse engineering · DFIR · Security research
Quo
I write technical notes and walkthroughs focused on reverse engineering, forensics, CTFs, Windows internals, and security investigations.
Latest dispatches
Latest Blog Posts
30 June 2026
CyberDefenders Spotted in the Wild Write-up
DFIR write-up covering Telegram delivery, malicious archive execution, persistence, discovery, staging, and log tampering.
Read more8 June 2025
Windows Forensics - Lateral Movement & Persistence Analysis
Analysis of a Windows forensics challenge involving lateral movement, persistence techniques, and practical DFIR tooling.
Read moreWorkshop
Featured Projects
Project
Phalanx
Experimental C-based Linux EDR exploring host telemetry, detection primitives, and defensive engineering.
Project detailsProject
DFIR Toolkit
Placeholder for a digital forensics and incident response project focused on repeatable investigation workflows.
Project detailsProject
EVTX Mapper
C-based EVTX parser and relational mapper for turning Windows event data into structured investigation context.
Project details