threat intel & security research
tyler
Security researcher focused on threat intelligence, malware analysis, and offensive security. I write about what I learn — CTF writeups, reverse engineering, detection engineering, and more.
recent posts
all posts →
HTB: Forest — Active Directory Exploitation via AS-REP Roasting
Enumerating an AD environment, abusing AS-REP roasting to crack a service account hash, and escalating to Domain Admin via WriteDacl abuse.
Hunting Cobalt Strike: JARM Fingerprinting & C2 Detection at Scale
Using JARM TLS fingerprinting and passive DNS to hunt for Cobalt Strike team servers across the internet — techniques, tooling, and findings.
Writing YARA Rules for Emotet Loader Variants
A practical walkthrough of analyzing Emotet loader samples and developing robust YARA detection rules that survive obfuscation changes.
projects
all projects →
c2-hunter
Python toolkit for automated C2 infrastructure discovery using passive DNS, JARM fingerprinting, and certificate transparency logs.
yara-forge
Curated collection of YARA detection rules for common malware families, organized by threat actor and malware type.
ctf-notes
Personal knowledge base of CTF techniques, tooling one-liners, and exploitation patterns accumulated across competitions.