I work in threat intelligence. Most of my attention goes to Certificate Transparency: every publicly trusted TLS certificate gets logged, which makes CT one of the earliest places a phishing domain becomes visible, often before it serves a single page. I write the tooling for that in Rust.
certstream-server-rust
A Rust implementation of certstream-server. It watches CT logs and streams newly issued
certificates over WebSocket in real time. Packaged for Homebrew, APT and DNF.
brew install reloading01/tap/certstream-server-rustthreat-intelligence-dataset
A source-grounded, fact-checked instruction-tuning dataset for cyber threat intelligence.
12k examples across 42 CTI categories, built from MITRE ATT&CK, CVE/KEV, CWE, CAPEC,
D3FEND and live threat feeds.
toolmark
Forensic timelines and detectors for the artifacts AI coding agents leave behind on a machine.



