Field Notes

Short technical write-ups, working notes, and reference material from active investigations and research.

PDF Phishing Triage

Static-first checklist to quickly classify phishing PDFs, extract redirects, and identify exploit indicators.

Dabbling with light malware analysis. Starting with investigating the PCAP file

Building a tiny Ubuntu ForensicsVM, locking down SSH, and wiring Syslog into Log Analytics with Azure Monitor Agent. Part 2 of my Azure lab series.

How I structured my personal Azure tenant, subscription, and roles to support both AZ-500 studying and a small forensics lab. Part 1

Why I turned an idle Raspberry Pi into a honeypot that ships to Azure Log Analytics, plus the tiny set of commands/aliases I’ll actually use.