BLUE TEAM · THREAT HUNTING · MONTREAL
I’m Amit Vijayan, a blue-team cybersecurity professional in Montreal. I hunt threats, build detections, and share what I learn along the way.
Now: a sharp cyber threat brief, every morning.
FEATURED INVESTIGATIONTHREAT HUNTING
FROM THE KNOWLEDGE LIBRARY
Threat Hunting Playbooks
The quietest domain compromise has no malware: a roasted service ticket, a DCSync, and a forged Golden Ticket, hunted with DC event IDs, KQL and Splunk queries, and a lab walkthrough.
Threat Hunting Playbooks
Both Barracuda ESG flaws hit CISA KEV on November 10, due November 13: an unauthenticated backup restore plus a timezone injection gives attackers root. Hunt the upload, the restore, and the shell.
Threat Hunting Playbooks
CISA's fix deadline for PolyShell is tomorrow, and the campaign that hit 471 Magento stores in one hour is still rewriting CMS blocks. These Splunk and CrowdStrike hunts find its webshells.
THE THREAT LANDSCAPE
Cyber threat briefs, collected in one place.
Browse cyber newsBEHIND THE RESEARCH
Good security starts with clear thinking.
I’m a cybersecurity professional with more than eight years of experience across incident response, digital forensics, threat intelligence, and security operations. I currently work in product security incident response at Ericsson; my background includes roles at Morgan Stanley, Microsoft, PwC, and Paysafe.
I share practical defensive techniques and research notes to help security professionals and aspiring defenders build sound investigative judgment.
Connect on LinkedIn
