Blog

Technical writeups on security tools, CTF machines, and concepts.

AI Log Anomaly Detector: auth.log to MITRE ATT&CK in 30 Seconds

Why I Built This

/var/log/auth.log is full of signal. Brute forces, privilege escalations, new user accounts โ€” all there. But finding them manually means grep โ€ฆ

Building a SAST+DAST Triage Tool with AI False-Positive Filtering

The Problem with Raw Scanner Output

Run Semgrep and Bandit on the same Python repo and you’ll get the same SQLi finding at app.py:42 twice โ€” different โ€ฆ

HackTheBox: Archetype Walkthrough

Target

Archetype โ€” HTB Starting Point, Windows machine.

IP: 10.10.10.27

Enumeration

nmap -sV -sC -p- 10.10.10.27

Interesting ports:

  • 445/tcp โ€” SMB
  • 1433/tcp โ€” โ€ฆ