Smaller projects and one-off scripts. The selected_work catalog is where I put projects with a design story worth a write-up; the lab is where the day-to-day toolbox lives.
Most of these started as a single annoying problem on a Monday 🙂: suspected malware we needed to detonate, a PST we needed to triage, a config we needed to decrypt during an IR. They earned a name and a folder because they kept being useful after the original problem went away. None of them are demos. They are tools — used in real investigations, real audits, real change windows.
Click any row to expand an interactive demo. Listed in reverse-chronological order.