Blogs
- Why public YARA rule repos go quiet: the maintenance economics nobody budgets for
- Static config extraction without detonating the sample: a walkthrough
- APT reports in the post-APTNotes era: how the open-source threat-intel archive ecosystem works in 2026
- What I miss about the 2010s malware analysis web
- Modern stealer config formats: how Lumma, Atomic, and DanaBot store their C2 data
- What I use instead of malwareconfig.com (notes from the new operator)