QbitX / Field notes
Evidence worth keeping.
Methods, guides and runbooks from Odin Midtgård’s security workbench. Follow the reasoning, then put it to work.
Open the workbench- 38entries
- 8topics
- 2026-09-22latest journal entry
Getting started
What this site is and how the notes are written.
3 entriesDetection engineering
Turning observations into rules that someone else can read and test.
1 entryFocus & ADHD
How I plan, start and restart work with an ADHD brain.
1 entryHomelab
The isolated network the analysis runs on, and the scripts around it.
2 entriesLocal LLM stack
Qwen3.8-27B on two GPUs with llama.cpp, llama-swap and Unsloth Studio. What worked, what did not.
12 entries- Benchmarking honestlySix ways my benchmarks produced numbers that never happened, and a small script that avoids them.
- Clients and harnessesWhich tools talk to which server, and the client-side settings that must match the server.
- Context, fit-target and CPU layersThe one flag that unlocked full context, the one number that tells you if a config is good, and why pinning layers breaks dual-GPU setups.
- Hardware and modelThe dual-GPU box, why a 27B model fits with a huge context, and which quant to pick.
- llama-swap setupThe llama-swap config that serves Qwen3.8-27B at full context, flag by flag, and how to check it after a change.
- MTP speculative decodingThe built-in draft head that gives up to +78 percent decode speed, how to tune it, and the settings that looked right but were not.
- Open questions and sourcesWhere my own notes disagree, what is still untested, and every outside source this section draws on.
- OrcaSAQ-2 Cyber and DFlash2An uncensored Qwen3.8-27B twin, and the external DFlash2 drafter that reaches 99 t/s, once you serve it on the right binary.
- Pitfalls and fixesEverything that did not work, a symptom table for when something breaks, and the history of configs that led here.
- Reasoning effort, thinking budget and samplingWhy Qwen3.8 thought until it ran out of tokens, how the effort setting really works, and the sampler values to use.
- Qwen3.8-27B on two GPUs, start hereHow my local Qwen3.8-27B stack is set up, what the numbers are, and which page to read next.
- Unsloth Studio and the agent harnessThe second server, its presets, every Run settings field, and how the agent harness stays in step with it.
Malware analysis
Looking at unknown files carefully, and writing down what is known.
4 entries- File triage checklistWhat to record before any analysis.
- What hash reputation can and cannot tell youAn unknown hash is a starting point, not a verdict.
- Orca's first test: two malware samplesA local 27B cyber model, one plain prompt, two malicious Windows binaries fully pulled apart — AES config, C2, IOCs and all.
- Reading PE importsWhat imports suggest, and what they cannot prove.
Prompts
Copyable prompts for learning, technical work and teaching. Choose a task, copy the prompt, check the result.
14 entries- ADHD study and learningTurn notebook sources into clear explanations, ranked revision and active recall.
- ADHD universal promptsOne consistent set of instructions for source work, learning and practical tasks.
- Audio Overview for learningUse analogies, callbacks and retrieval questions to teach the important ideas.
- Choose an audio or video formatPick one NotebookLM format for the job, then check your understanding in chat.
- Create a source-grounded glossaryExtract and define the terms in your sources without inventing extra entries.
- Infographics and cutaway diagramsTwo prompts for teaching a topic visually or explaining the parts of an object.
- Organise notes without losing informationMerge scattered notes into one draft per subject while keeping every fact, conflict and source.
- Review a prompt before you change itFind specific weaknesses in a reusable prompt, with evidence before any verdict.
- Revise a prompt without losing its intentGet one complete revised prompt and a small test plan from a review report.
- Tailor a CV, cover letter and LinkedIn to a jobA Norwegian-language prompt that matches your documented experience to one job posting, step by step.
- Technical work and cybersecurityWork through technical sources, labs and troubleshooting with evidence and visible progress.
- Video Overview for learningBuild a visual model with diagrams, consistent analogies and recall questions.
- Write a new prompt with C.R.A.F.T.Turn a task description into a short, checkable prompt without invented facts.
- YouTube and transcriptsTurn videos into navigable notes, reproducible steps and source-grounded answers.
Runbooks
Step by step procedures you can follow under pressure.
1 entry