↓
Skip to main content
Christoph Kemetmüller
Blog
About
Blog
About
Detection & Defence
2026
Sep 15
Data Science for Detection Engineering Maintenance
Byte
Sep 15
Beyond Chat: Building Multi Agent SOC Ecosystems with Claude and Google MCP
Byte
Jul 5
CVE-2026-31431 - Copy Fail: Four Bytes to Root
Vulnerability
May 22
CVE-2026-43284 - "Dirty Frag" Linux page-cache LPE via ESP and RxRPC
Vulnerability
Mar 1
Automating GOAD and Live Malware Labs
Byte
2025
Nov 10
Trap bots on your server
Byte
Oct 27
MITRE ATT&CKcon 6.0 talks are now on demand
Byte
Oct 27
MITRE Attack Flow v3.0.0 charts how attackers chain ATT&CK techniques
Byte
Oct 27
SCYTHE's framework for building a purple team program
Byte
Jul 12
Spotting Malicious Remote IT Applicants
Byte
Jun 12
Build-Your-Own-Ransomware workshop teaches attack and detection
Byte
Apr 18
Tracking anticheat updates by pulling modules from their CDNs
Byte
2024
Nov 24
Insights from CISA Red Team Assessment
Byte
Sep 16
Building a Purple Teaming Test Environment with Ludus
Byte
2023
Nov 9
Detecting and annoying Burp users
Byte
Nov 9
Detection Engineering at MITRE ATT&CKCON 2023
Byte
Jun 1
Block C2 communication with Defender for Endpoint
Byte
Jun 1
Volt Typhoon: PRC state actor living off the land
Byte
May 9
CMEPW/BypassAV, a mind map of AV and EDR evasion techniques
Byte
Feb 17
Stealthy C2 via Failed Request Event Buffering (FREB)
Byte
Jan 20
CISA Updates Best Practices for MITRE ATT&CK Mapping
Byte
2022
Dec 3
TeamViewer font for Fraud Detection
Byte
Nov 21
Can I secure… Digital Life
Byte
Jul 26
MDSec on detecting in-memory beacons and Cobalt Strike
Byte
Jun 27
pre.empt's Maelstrom series builds a minimal C2 and its detections
Byte
1
2
→
↑