// index of /casefiles

Case Files

Sanitized case studies from operations and research. Every file follows the same five-beat structure — briefing, threat, method, findings, impact — so you can compare the work across domains. Hover or focus a file to declassify its exhibit.

CF-001Malware Research

Decoding Malicious Camouflage

How three malware families slip past AMSI and EDR — dissected in an isolated lab and mapped to 30 MITRE ATT&CK techniques. Any.RunREMnuxT1562.001 Open file CF-002Detection Engineering

Mapping Detections to ATT&CK Coverage

Turning observed adversary behaviour into a technique coverage map — and using the gaps to decide which detections to build next. MITRE ATT&CKSplunkDefender Open file CF-003Vulnerability Management

Risk-Led Triage Across an Enterprise Estate

Prioritising vulnerabilities with CVSS and threat-intelligence-led criteria, then driving remediation to closure with the teams that own the fix. CVSSNessusRisk Acceptance Open file