Expand all technique pages with deep research findings Added: parser internals, negative results, edge cases, capacity tests, EKU confusion table, PowerShell AllSigned limitation, caching behavior, FormatGhost ACL details, SPC_NESTED_SIGNATURE kernel behavior, closed leads, architecture decisions, and technique variations not shipped. New page: Research-Notes.md
Full wiki: 15 pages covering usage, techniques, OPSEC, detection, extending
Initial Home page