Field notes and technical write-ups, mostly around security, networking and development.
A look back at designing a Linux detection system that combines Firecracker micro-VMs, eBPF monitoring, Sigma rules and Bayesian scoring — static and dynamic analysis working together.