The Internet Observatory

                68 74 74 70 73 3A 2F 2F 74 
                69 6E 79 75 72 6C 2E 63 6F 
                6D 2F 32 72 33 78 75 36 61 
                62 00 00 00 00 00 00 00 00
       ,-.
      / \  `.  __..-,O
     :   \ --''_..-'.'
     |    . .-' `. '.
     :     .     .`.'
      \     `.  /  ..
       \      `.   ' .
        `,       `.   \
       ,|,`.        `-.\
      '.||  ``-...__..-`
       |__|         
       /||\
      //||\\
        

Hi! Welcome to my website.

This space is for presenting my public research in malware analysis, vulnerability research, and cyber threat intelligence, with a focus on industrial systems and critical infrastructure.

Featured

• Public Research

  Updated:Apr 22, 2026 |  at 01:43 AM

  Please see this page for complete listing of public research in the form of blogs, whitepapers, and webinars.

• CVEs Discovered

  Published:Jul 15, 2024 |  at 03:15 PM

  Please see this page for exhaustive list of discovered and disclosed vulnerabilities.

Recent Posts

• Hunting Beyond Indicators - Part 2

  Published:Nov 6, 2025 |  at 03:00 PM

  I wrote part two of my Hunting Beyond Indicators series for THOR Collective, walking through two real behavior-based hunts for ICS/OT-related capabilities.

• Hunting Beyond Indicators

  Published:Oct 17, 2025 |  at 08:57 PM

  I wrote a blog for THOR Collective on the value of hunting beyond Indicators of Compromise.

• Don't Cry Wolf - Evidence-based Assessments of ICS Threats

  Published:Oct 17, 2025 |  at 07:05 PM

  Jimmy Wylie's and my DEF CON'33 talk is now available on YouTube. We discuss the analytical rigor undertaken before claiming a capability is "ICS-specific malware" with some specific examples I found while threat hunting.

• The Bot(net) that Got Away

  Published:Sep 20, 2025 |  at 10:05 PM

  A fun surprise in early August - this website was the target of a DDoS attack! It wasn't very effective, it didn't take my website down nor did I notice at the time.