RESEARCH
Research
Field notes and long-form technical work: threat intelligence, infrastructure, and the craft of building software.
2026-11-13
Minutes versus months
How fast exploited vulnerabilities become incidents, and how far behind them the patch cycle runs. Twelve months of labeled evidence, November 2025 to November 2026.
2026-10-30
Field notes No. 1 — what we publish here
The research charter: threat intelligence, infrastructure experiments, and honest write-ups of what worked and what composted.