Starting Shellcat
A short note on turning private security notes into an honest record of how I work.

I had commands in my notes that still ran, but I could no longer explain why I had saved them. The same folder held recon decisions, dead ends I did not want to repeat, and questions that later turned into small tools. Most entries assumed I would remember the missing context. I usually did not.
This site is my attempt to write that context down.
I am interested in the part before the polished result: why an endpoint looked odd, which assumption failed, what the code actually did, and how I changed the method afterwards. A command without its scope, assumptions, and stop condition is not a useful method.
Some posts are security methods. Some are build logs for tools I am still learning from. Others will be short notes that answer one question well. I will label the difference instead of making every experiment sound like a shipped finding.
The bar
For technical claims, I want a reader to be able to trace the evidence: a request, a code path, a command, a public source, or a clear statement that something is only my interpretation. Authorized program details stay private until disclosure is allowed, and sensitive material does not belong here at all.
I also want to keep the failed parts. FaceCheck Pro has a small demo index, not a commercial-scale system. BBHUNTER contains opinions about process that still need to earn their place through use. Those limits make the writing more useful, not less.
I am publishing the notes I wish I had kept, including the dead ends.
This note also appears on Shellcat. Read that edition.