The office
About the lab
One person, no institution and a no budget. I work on threat intelligence, malware and red team research, and unconventional projects, and I publish what I find. This page is the short version of who is behind it and how a project goes.
- Role
- Independent security researcher and threat intelligence analyst
- Focus
- Detection, Research, SOC and Red teaming
- Publishes
- Medium, GitHub
- Languages
- English, Polish
- Contact
- X3306.Business@proton.me
What the lab does
four drawersThreat intelligence
APT tradecraft and detection, with a focus on the TTPs. Published as public reports.
Malware and red team research
Malware analysis and offensive concepts, including EDR evasion, studied in lab environments only.
Unconventional projects
Honeypot infrastructure, decoys and testbeds, including testbeds aimed at autonomous AI agents.
Small tools
Open-source utilities that solve one problem: local secret detection, steganography research.
How a project goes
a loop, not a lineStep five is the one people skip. A failed experiment gets written up like any other, which is why Tarnhaven has its own page.
The year so far
only what is datedWant to talk about any of it? Write to me.