The Internet Observatory
Hi! Welcome to my website.
This space is for presenting my public research in malware analysis, vulnerability research, and cyber threat intelligence, with a focus on industrial systems and critical infrastructure.
Featured
CVEs Discovered
Updated: at 11:00 PMPlease see this page for exhaustive list of discovered and disclosed vulnerabilities.
Public Research
Updated: at 01:43 AMPlease see this page for complete listing of public research in the form of blogs, whitepapers, and webinars.
Recent Posts
CISS'26 Competition
Published: at 12:00 PMMy experience as a judge for the Critical Infrastructure Security Showdown, an international cybersecurity competition focused on operational technology.
Hunting Beyond Indicators - Part 2
Published: at 03:00 PMI wrote part two of my Hunting Beyond Indicators series for THOR Collective, walking through two real behavior-based hunts for ICS/OT-related capabilities.
Hunting Beyond Indicators
Published: at 08:57 PMI wrote a blog for THOR Collective on the value of hunting beyond Indicators of Compromise.
Don't Cry Wolf - Evidence-based Assessments of ICS Threats
Published: at 07:05 PMJimmy Wylie's and my DEF CON'33 talk is now available on YouTube. We discuss the analytical rigor undertaken before claiming a capability is "ICS-specific malware" with some specific examples I found while threat hunting.