Writeups
Short, practical notes from threat-intel work — recon methodology, notable exposures, and pivoting techniques. Newest first.
Persona, Infrastructure & Access: An Operational Case Study Attributed to "APT35"
An operator’s own Farsi-language timesheet — 20 daily reports over two months — reconstructs how an APT35-attributed operation was actually built, day by day: persona infrastructure, KYC and …