Welcome to Block-Continue
A security blog by Ben Braun.
Security operations, incident response, and the occasional hard-won lesson.
Recent Posts
-
Home Lab Diaries, Part 1: I Just Wanted a SIEM
Repurposing an old laptop into a Splunk lab sounded like a weekend project. It became a BIOS standoff, a USB ethernet graveyard, and one genuinely terrifying reboot.
-
Poisoned at the Source
Someone shared an interesting article. A colleague forwarded it. Three managed devices got wiped before the week was out.
-
Today's Special: Juicy Nothing-Burger
762 sessions. Rotating AWS infrastructure. Dual C2 channels. Jittered intervals specifically designed to defeat statistical detection. On a cafeteria menu board.
-
Four Days, 22 Emails, and One Very Patient AI Persona
I built an autonomous AI scambaiting persona and pointed her at a fake government grant scammer. Four days later he rage-quit and called her an Olofo.