Observed arrival · 2026-10-06
Jack Sessions’s security research and tools
A security researcher’s home base for DFIR writing, talks, open-source tools, videos, and music.
○Open
⊠Login
$Paid
†Ads
✦Pretty
●Pro
◎Niche
◉Human
⚑Risk
ƒJS
- For
- DFIR practitioners and security researchers
- Worth noticing
- RuntimeTrace checks whether the kernel’s view of running processes agrees with tools such as ps and lsmod.
Field notes
The project cards pair installation commands with links to write-ups, GitHub, and PyPI. ManifestTrace is described as turning two of Sessions’s Android-related CVEs into five checks; RuntimeTrace compares the kernel’s account of what is running with familiar system tools. Hayabusa Lens is labeled local-first and MIT-licensed, and its AI investigator is described as keeping an audit trail of its questions.
Observed signals
Read the marks
Editorial observations of this landing page, not a rating.
○OpenPublic substance visible
✦PrettyNotable craft visible
●ProPolished or operationally mature
◎NicheUnusually specific use
◉HumanPersonal, local, civic, or handmade
ƒJavaScriptBrowser-side code central
One card from the complete issue