Agentic Security · September 3, 2026
Staging, Knowledge & Agent Scaling
Skill files as governed policy, a quarantine pipeline for new capability, turning operator notes into skills, and how to scale an agent pool without losing coordination.
Loading...
Speak to a Security Expert
Home / Contact
Research
Security Research
Security research, vulnerability analysis, threat intelligence, and offensive security findings.
Infrastructure · June 25, 2025
FreeIPA in the Enterprise
A practical, end-to-end walkthrough of FreeIPA versus Active Directory: installation, hardening, email integration, SSO, web app auth, and how we migrated an existing AD estate without a lights-out weekend.
Threat Hunting · June 20, 2025
svchost.exe Demystified
svchost.exe is one of the most common processes on a Windows endpoint—and one of the easiest for an analyst to misinterpret. Learn why multiple instances are normal, what healthy service-hosting behavior looks like, which telemetry matters, and how to investigate an instance that does not fit the expected pattern.
Engineering
Technical Guides
Hands-on guides covering cybersecurity, DevSecOps, cloud infrastructure, automation, and platform engineering.
Agentic Security · September 3, 2026
Staging, Knowledge & Agent Scaling
Skill files as governed policy, a quarantine pipeline for new capability, turning operator notes into skills, and how to scale an agent pool without losing coordination.
Agentic Security · August 27, 2026
Professional Agent Lab on Kali
How we containerized a multi-agent red-team stack on Kali with Docker Compose, the advanced configuration that made it repeatable, and what it means for red and blue teams.
Pentesting · August 15, 2026
METATRON Installation & Operator Manual
A consolidated installation and operator manual for METATRON, covering native and Dockerized deployment, local-LLM-assisted reconnaissance, day-to-day operation, troubleshooting, and defensive monitoring.
Latest
Latest Articles
Recent articles and insights from ROO Secure.
Agentic Security · September 3, 2026
Staging, Knowledge & Agent Scaling
Skill files as governed policy, a quarantine pipeline for new capability, turning operator notes into skills, and how to scale an agent pool without losing coordination.
Agentic Security · August 27, 2026
Professional Agent Lab on Kali
How we containerized a multi-agent red-team stack on Kali with Docker Compose, the advanced configuration that made it repeatable, and what it means for red and blue teams.
Agentic Security · August 20, 2026
Multi-Agent AI Red Teams
We ran three autonomous agents against a single target in parallel and watched a terminal dashboard turn a solo operator into something closer to an operations floor.
Pentesting · August 15, 2026
METATRON Installation & Operator Manual
A consolidated installation and operator manual for METATRON, covering native and Dockerized deployment, local-LLM-assisted reconnaissance, day-to-day operation, troubleshooting, and defensive monitoring.
Penetration Testing · June 26, 2026
Naabu: The Definitive Enterprise Port Scanner
Every flag, every scan mode, and every integration pattern—from high-speed port discovery to CI/CD pipelines and ProjectDiscovery Cloud—for practitioners conducting authorized security assessments.
Infrastructure · June 25, 2025
FreeIPA in the Enterprise
A practical, end-to-end walkthrough of FreeIPA versus Active Directory: installation, hardening, email integration, SSO, web app auth, and how we migrated an existing AD estate without a lights-out weekend.
Threat Hunting · June 20, 2025
svchost.exe Demystified
svchost.exe is one of the most common processes on a Windows endpoint—and one of the easiest for an analyst to misinterpret. Learn why multiple instances are normal, what healthy service-hosting behavior looks like, which telemetry matters, and how to investigate an instance that does not fit the expected pattern.
Pentesting · June 15, 2025
Modern Penetration Testing
A phase-by-phase look at how a structured penetration test actually runs, from scope and reconnaissance through exploitation, post-exploitation, and a report your engineering team can act on.
Incident Response · June 10, 2025
Fixing Throttled Wi-Fi on Windows
Your router isn't the bottleneck. Windows quietly caps your wireless adapter to save battery -- here's how to find every place it's doing that, and undo it in about ten minutes.
Endpoint Telemetry · May 20 2026
Windows hidden fingerprint
Windows hidden fingerprint, what the GDID revelation means for defenders
Endpoint Telemetry · July 2026
Windows hidden fingerprint
A federal complaint against an alleged Scattered Spider member surfaced a persistent Windows identifier most security teams have never heard of. Here's how it works, how it survived a VPN, and what defenders can do with that information.