Technical notes from Active Directory labs, SIEM detection engineering, and certification preparation (Security+, eCPPT, and HTB CPTS).
A practical breakdown of how Kerberos pre-authentication abuse works, how to test for it during internal assessments, and how to detect Event ID 4768 anomalies.
Structured study notes from CPTS and eCPPT preparation covering common Linux privilege escalation vectors and how auditd rules can catch them.
Field notes on discovering hidden parameters, testing Server-Side Request Forgery (SSRF) against internal metadata services, and implementing egress filtering.