Investigations told through the evidence. Step by step, with the assumptions left visible.
A DFIR walkthrough of the Glyph challenge, tracing a Unicode homograph phishing chain through browser artifacts, PowerShell, NTFS, SRUM, malware execution, C2 activity, and persistence.
A recovered disk blew the case open. The files inside weren't theory, they were a checklist. Hours later, an unmarked matte-black drone was found half-buried in snow in Budapest,
The coordinates led police and investigator into winter, to a place far enough from everything that no one would notice if something went wrong.
A memory dump from a connected Linux machine reveals covert network connections, fake services, and unusual redirects. Holmes investigates further to uncover how the attacker is manipulating the entire network!
