SOC Analyst | Incident Response | Threat Hunting
Cyber Security Research & Analysis
I'm Harry, a SOC analyst working at Huntress. This is where I publish security research, threat hunting write-ups and anything else I find interesting in cyber security.
Practical write-ups, technical findings and lessons from defending real environments, in a SOC protecting over 5 million endpoints.
Latest posts
All posts →-
PaperCut CVE-2026-82078 and CVE-2026-81578 Analysis and Case Study
A technical case study of a real-world PaperCut compromise involving CVE-2026-81578 and CVE-2026-82078, covering exploitation, malicious Java payloads, privilege escalation attempts, C2 activity, and containment from a Huntress SOC investigation.
-
From Intrusion Analysis to HijackLibs: DLL Sideloading Research
This write-up covers my DLL sideloading research and recent contributions to HijackLibs, including an investigation where a legitimate, signed VMware binary, vmware-vmx.exe, was renamed and used to load a malicious libcrypto-3-x64.dll from the same directory.
About
I work as a Security Operations Centre analyst, where most of my time goes on triaging alerts, investigating suspicious activity and wrecking hackers.