Malware Analysis Fundamentals
Static, dynamic, and memory analysis tradecraft
Woogi's Infosec Blog
Latest articles
Elastic SIEM and KQL: The Open-Source Alternative to Splunk
Architecture, ECS, KQL queries, and Kibana investigation patterns for blue team work
Splunk for Blue Team: SPL Queries and Investigation Patterns
Architecture, essential SPL commands, and real investigation patterns from a SOC perspective
Memory Forensics with Volatility: Finding What Attackers Hide in RAM
Why memory matters, how Volatility works, and the plugins that catch modern attacks
Digital Forensics Fundamentals: Evidence to Analysis
The forensic process, evidence collection, order of volatility, and the tools that actually work
Kill Chain, Diamond Model, Pyramid of Pain: Three Frameworks Every Blue Teamer Should Know
Three complementary threat intel frameworks — when to use each and how they work together
Cyber Threat Intelligence Lifecycle: From Raw Data to Actionable Intel
The six-phase CTI cycle, the four types of intelligence, and the protocols that govern sharing