blue-team/

Alert triage, investigations and detection work. Each entry shows the reasoning, the evidence and what I got wrong. Lab data only.