July 2026 · 6 min read
Splunk BOTSv1 Lab: Reconstructing a Web-Application Intrusion
Hands-on SOC practice: using SPL to trace a Joomla compromise from the first scanner request through to the web shell.
Read post →Blog
Essays and longer-form thoughts on software development, security, and the open web.
March 2026 · 5 min read
Why Can’t I Just Build One App?
The hidden cost of Apple and Google’s walled gardens, and why developers still have to build the same app twice.
Read post →