<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>Proofmetry Research</title>
    <link>https://proofmetry.com/research/</link>
    <description>Evidence-oriented research on native post-C2 malware behavior.</description>
    <language>en-us</language>
    <lastBuildDate>Sun, 30 Aug 2026 00:00:00 GMT</lastBuildDate>
    <atom:link href="https://proofmetry.com/research/feed.xml" rel="self" type="application/rss+xml" />
    <item>
      <title>Abyssos v2.1F: From C2 Tasking to Endpoint Evidence</title>
      <link>https://proofmetry.com/research/abyssos-v2-1f/</link>
      <guid isPermaLink="true">https://proofmetry.com/research/abyssos-v2-1f/</guid>
      <pubDate>Sat, 29 Aug 2026 00:00:00 GMT</pubDate>
      <description>One Abyssos v2.1F sample, 25 intended paths reached, 23 corroborated results, terminal states, or endpoint effects, and two explicit effect limits.</description>
    </item>
    <item>
      <title>C2Looper: What Seven Native Command Paths Revealed</title>
      <link>https://proofmetry.com/research/c2looper/</link>
      <guid isPermaLink="true">https://proofmetry.com/research/c2looper/</guid>
      <pubDate>Fri, 28 Aug 2026 00:00:00 GMT</pubDate>
      <description>Eight mapped command handlers and seven paths observed in one C2Looper Windows DLL variant; directory enumeration remained static-only.</description>
    </item>
  </channel>
</rss>
