Archives
All the articles I've archived.
- langchain 3 min read
Building LangChain Tools and Agents: From Zero to SOAR Assistant
Learn how to create LangChain tools from scratch and build a simple SOAR (Security Orchestration, Automation and Response) agent. This hands-on tutorial covers the fundamentals of tool development and agent creation for security automation.
Read article - rag 5 min read
Building a RAG System for Cybersecurity Compliance: A Simple POC with LangChain v1+
A step-by-step walkthrough of building a basic RAG system with LangChain v1+ to query compliance regulations. This is an unoptimized POC for learning purposes, not production-ready.
Read article
- ml-cyber 20 min read
Engineering Security ML with Elastic – Part 3: Benchmarking Unsupervised Models
How to Compare Anomaly Detection Models Without Labels
Read article - langgraph 5 min read
LangGraph Agent Architectures and Patterns: A Professional Guide
A comprehensive theoretical guide on agent architectures and patterns used professionally in AI projects. From simple workflows to hierarchical multi-agent systems, with real-world use cases for each pattern.
Read article
- elasticsearch 11 min read
Engineering Security ML with Elastic – Part 1: From Logs to Features
From Windows Event Logs to Behavioral Features: Preparing Elasticsearch Data for Anomaly Detection
Read article - typescript 3 min read
TypeScript for Pythonistas: A Guide to Building Red Team Tools
A comprehensive TypeScript guide for Python developers. Learn the fundamentals by comparing Python and TypeScript code, focused on offensive security tool development and MCP servers.
Read article
- web 2 min read
Web Exploitation Cheatsheet
SQLi, RCE, LFI/RFI, File Uploads, Deserialization, SSTI, Auth bypass and manual exploitation for HTB, CTFs and real-world pentests
Read article - windows 2 min read
Windows Privilege Escalation Cheatsheet
Fast techniques, tools, and commands for HTB, CTFs and OSCP-like environments
Read article
- smb 2 min read
SMB & RPC Enumeration Cheatsheet
Fast SMB, RPC and Windows service enumeration for HTB, CTFs and real-world AD pentests
Read article - web 2 min read
Web Attack Surface & Enumeration Cheatsheet
Discovery, fingerprinting, content discovery, parameter fuzzing, virtual hosts and technology mapping for HTB, CTFs and real-world pentests
Read article
- active-directory 2 min read
Active Directory PrivEsc Cheatsheet
ACL abuses, delegations, AD CS, RBCD, Shadow Credentials, and domain privilege escalation paths
Read article - adversarial-ml 14 min read
Adversarial Machine Learning: Attacks and Defenses
Deep dive into adversarial attacks against ML models: evasion, poisoning, and extraction. Exploring defenses, red teaming strategies, and the MITRE ATLAS framework for securing AI systems.
Read article