Home
Menu
Home
Posts
Talks
Tweets
|
LIGHT
DARK
Technical blog by Stephan Berger (@malmoeb)
Long term memory of my research and Incident Response stories
Recent Posts
Field Notes: EtherRAT Distributed Through a Legitimate Intune Workflow
14 Oct 2026
Today I learned: Python's .start Files as a Persistence Mechanism
4 Oct 2026
Field Notes: Reconstructing the Attacker's LSASS Dump
1 Oct 2026
The .zshrc.zwc You Forgot to Check
22 Sep 2026
Living Inside the Shell: zsh Modules on macOS
16 Sep 2026
See all posts