Documenting adversary tradecraft.
One artifact at a time.
This site is a living record of a real-world DFIR investigation following a directed 0-day attack on a Windows workstation. Each post walks through a phase of the response — from initial triage to root cause analysis — with the goal of turning an incident into a demonstrable skillset.
Latest Log Entries
Background
My name is Roman Hunt. I am a Systems Administrator and Information Security researcher with a focus on incident response, system and cloud security, and reverse engineering.
This portfolio is built around a single, real incident — a directed attack on a personal Windows workstation — documented with the rigor of a professional incident response engagement.
- Emailroman@systemwarfare.net
- GitHubgithub.com/iosentry
- LinkedInlinkedin.com/in/yourname