Project Atlas

A constellation of work, drawn under quiet moonlight.

Research archives, original builds, and open-source stewardship all live here in one dedicated space. The structure is ready to grow as the project list grows.

Begin with ResearchReturn Home
Research02Waxing archiveOwn Projects02Moon-forged systemsOpen Source02Shared moonlight

Moonlit Index

Field Notes

The archive of inquiry

Waxing archive

Original Builds

The forge of tools

Moon-forged systems
Own ProjectReference suite

Eventlog Compendium

The observatory of Windows telemetry

A browser-native reference and investigation suite for Windows Event Logs that brings Event ID lookup, audit policy guidance, MITRE mappings, field decoding, built-in SACL exploration, and routing research into one coherent surface.

Author and maintainer
  • Cuts the time between a raw Event ID and the surrounding context that makes it useful.
  • Connects audit policy decisions to the event coverage defenders actually care about.
  • Makes obscure Windows fields, mappings, and defaults easier to interpret under pressure.
Visit project
Own ProjectIntelligence platform

Phoenix - Sigma Rule Intelligence Platform

The atlas of Sigma intelligence

A Sigma intelligence platform for browsing, searching, and analyzing detection rules through MITRE ATT&CK coverage, author analytics, testing workflows, release tracking, and ecosystem context.

Author and maintainer
  • Makes large volumes of Sigma content explorable by rule quality, coverage, and provenance.
  • Brings releases, testing context, and ecosystem intelligence into one defender-facing workflow.
  • Helps teams move from a rule name to practical detection context much faster.
Visit project

Shared Constellations

The commons of creation

Shared moonlight
Open SourceCommunity stewardship

SigmaHQ / Sigma

The open defense commons

One of the central open ecosystems for portable detection rules, where research quality, clarity, and maintainership shape what defenders can share and operationalize.

Core maintainer
  • Helps steward rule quality and technical direction.
  • Contributes to a shared language for detections across tools.
  • Keeps open collaboration aligned with practical defensive use.
Visit project
Open SourceShared stewardship

LOLDrivers

Driver abuse knowledge base

An open project cataloging vulnerable and abused drivers so defenders can reason more clearly about kernel-level tradecraft.

Core maintainer
  • Improves public visibility into a high-impact abuse surface.
  • Supports blocklisting and defensive prioritization.
  • Keeps the dataset useful through active stewardship.
Visit project