I'm Velkris - a cybersecurity practitioner and red team operator. Field notes on offensive tooling, malware internals, and adversary tradecraft.
Writing
2026
- 2026-08-21 NoiseHound 1.1: five detection tiers, and the cloud · 2 min
- 2026-08-10 Introducing NoiseHound: the quietest path, not just a path · 1 min
- 2026-08-03 Rebuilding the resources page · 1 min
- 2026-08-03 Diamond and sapphire tickets · 4 min
- 2026-07-27 An update, and where this is going · 1 min
- 2026-07-25 TLSH: fuzzy hashing for malware clustering · 1 min
- 2026-07-21 How Kerberoasting works · 1 min
- 2026-07-15 AMSI internals: where the scan actually happens · 1 min
- 2026-07-09 Domain dominance: persistence after Domain Admin · 1 min
- 2026-07-03 Reading entropy to spot packed code · 1 min
- 2026-06-24 Kerberos delegation abuse: unconstrained, constrained, RBCD · 1 min
- 2026-06-12 Imphash: fingerprinting malware by its imports · 1 min
- 2026-05-29 Golden, silver, and diamond tickets · 2 min
- 2026-05-20 Kerberos, end to end · 1 min