I used to be very frustrated when security researchers published detailed vulnerability reports - meticulously describing every step of the discovery process but failing to include indicators of compromise or exploitation. It’s not about writing detection rules for us. Just sharing a log snippet, suspicious process behavior, or anything else observed during successful exploitation would be incredibly valuable. Better handover between researchers and defenders means faster, more effective responses.

It's great that threat actors are using AI to generate their scripts - it adds comments to every code block, making it so much easier for us to read