pursuix//ops watching --:--:-- UTC
~$ ls ./blog --sort=recent

Notes & research

What I'm figuring out on the defensive side — reading traffic, triaging alerts, and turning it into detections. Written as I go.

note-001.md draft · updating

Understanding network traffic

What's actually moving across the wire, and how to read it — from a capture to a first detection idea.

#networking #pcap #blue-team cat understanding-network-traffic.md