cyberoddy

a notebook

Notes from threat intel work, data engineering projects, and adjacent things I care about. I write here mostly so I don't have to relearn the same thing twice. If it helps you, good.

Currently doing CTI. The field is younger and weirder than it pretends to be.

Posts get updated when I learn something that changes them. Dates reflect the original post date though, not last update.

recent

OSINT 101

2026-05-12

What OSINT is, where it fits in CTI, the sources you use for investigations, and how to NOT burn an investigation.