Writing a log viewer that supports Veeam, IIS, SQL Server, Kubernetes, syslog, and a dozen others means solving the timestamp problem fourteen different ways. Here's how LogSleuth does it.
Scanning a million-file NTFS volume in seconds requires bypassing the directory tree entirely. Here's how DiskSleuth reads the Master File Table directly and what that buys you.
Windows Event Viewer hangs for seconds on a log with 100k entries. The API underneath is fast. The gap is entirely the UI. Here's a walk through building a responsive replacement — plus the wevtutil tricks that make the built-in tool almost usable if you're stuck with it.
Gutmann's 35-pass overwrite was designed for 1996-era magnetic storage. On a modern SSD it's pointless at best and harmful at worst. Here's what actually works, why, and a decision tree for choosing.
Every Windows admin has fought the 'file in use' dialog. I've built two tools that solve the same problem in wildly different ways — one in Rust with egui, one in pure C with no runtime — and the comparison is more interesting than either tool alone.
A deep dive into the cryptographic choices behind SwatCrypt — why XChaCha20 over AES-GCM, how Argon2id key derivation works, and the pitfalls I avoided.