About

cottam.io is where I write up security research, offensive and defensive techniques, threat intelligence, and projects I build along the way.

I'm Cameron Cottam — a security practitioner working across red and blue. This site is an independent notebook: deeper than a thread, more honest than a polished case study. Expect reproducible writeups, defanged indicators, and the reasoning behind each finding.

Elsewhere

A note on ethics

Everything here is for defensive and educational purposes. Indicators are defanged by default, and nothing on this site is intended as operational guidance for unlawful activity.