Longer-form writing, organised into chapters.
-
HackingTeam's RCS: Bringing a Commercial Spyware Platform Back to Life
Reconstructing a leaked commercial-spyware backend, its operator workflow, its security, and the evidence it leaves defenders.
-
Revisiting the SolarWinds Compromise
A supply-chain attack: actor, malware, and techniques, read from the code.