EkrUp's blog
Blog
HTB-CDSA
LSM-Enforcer
SCC2026-Quals-Writeup
VEH-detecting
Projects
Home
Contact
© 2026 EkrUp's blog
Home
> Blog
Blog
Detecting VEH Debuggers on Windows with Rust
Detecting GhostDebug with Rust: inspect Windows VEH handlers, loaded modules, executable private memory, and INT3 breakpoints, with test results and limitations.
Blog
· 2026-09-04
Building a Linux Security Module in Rust: Blocking Ptrace with eBPF
Build an eBPF Linux Security Module with Rust and Aya to restrict ptrace, allow trusted debugger binaries by inode and device, and log denied attempts.
Blog
· 2026-03-31
SCC 2026 Quals Writeup: Forensics Challenges Walkthrough
Solutions to three SCC 2026 forensics challenges: DNS exfiltration in PCAPs, COM hijacking and memory analysis, and Chrome App-Bound Encryption.
Blog
· 2026-03-22
HTB CDSA Exam Review: My Preparation and How I Passed
My HTB CDSA exam experience: SOC Analyst path preparation, note-taking, the seven-day investigation, incident report writing, and practical tips.
Blog
· 2025-09-08
<
>
Touch background to close
EkrUp's blog
