About me
The person behind the guarded kernel.
I’m Elidio, a Cloud & Security student in Belgium with a particular interest in blue teaming.
I enjoy working through logs, understanding how an attack happened, and thinking about how to detect it. This blog is where I share what I learn through study, labs, and research.
Why this blog?
Writing helps me make sense of what I’m learning. The guarded kernel is a place to work through an investigation, explain a detection idea, or take a closer look at a threat group’s techniques.
I want the articles to be practical and clear: what happened, what the evidence shows, and what a defender can learn from it.
What I’m interested in
- Incident analysis: following evidence and reconstructing an attack.
- Detection engineering: turning attacker behaviour into useful detection logic.
- Threat research: understanding APT techniques and their defensive implications.
Find me online
You can find my projects and notes on GitHub.