Welcome to APT Analyst, where I track and break down the activity of advanced persistent threat groups — who they are, how they operate, and what their campaigns mean for defenders.

I write about threat intelligence, malware tradecraft, network defense, and the practical side of studying cybersecurity. Expect APT group profiles, campaign analyses mapped to MITRE ATT&CK, and notes from building detections in my home lab.