In March of this year, I successfully defended my dissertation An Application of Machine Learning to Packed Mach-O Detection. After four years, I completed a PhD in Cyber Operations from Dakota Sta...

The Silk Roads: A New History of the World Touching the Dragon: And Other Techniques for Surviving Life’s Wars Long Walk to Freedom: The Autobiography of Nelson Mandela The Coaching Habit: Sa...

Situation A remote code execution (RCE) bug was found in log4j. CVE 2021-44228 has been assigned to it. The vulnerability lies in how log4j interprets Java Naming and Directory Interface (JNDI) URL...

Security Onion on Proxmox I originally set up my homelab using Ovirt, but have since switched back to Proxmox. The reason for that is that the version of qemu that Ovirt ships with does not support...

In a recent demonstration of cyber and electronic warfare capabilities, I had the opportunity to enable access into a network by exploiting a computer remotely through a cell phone. In this blog po...

In a previous post I wrote about investigations that I performed on DNS over HTTPS (DoH). That research was performed as part of Cyber Security Research. During Security Tool Development, I expande...

Cult of the Dead Cow: How the Original Hacking Supergroup Might Just Save the World American Revolutions: A Continental History, 1750-1804 For Whom the Bell Tolls Benjamin Franklin: An Americ...

The Cuckoo project provides a safe environment in which to execute malware (also called “detonating”). I will be using Cuckoo as part of a malware analysis class. There are several guides that you ...

DNS Security As a plain-text protocol, DNS lacks Confidentiality, Integrity, and Availability (CIA) protections. An attacker who can observe DNS activity can see where the DNS request originated fr...

On Cyber: Towards an Operational Art for Cyber Conflict Red Badge of Courage Can American Capitalism Survive?: Why Greed Is Not Good, Opportunity Is Not Equal, and Fairness Won’t Make Us Poor ...