Feb 12, 2026 • 1 min • Updated Feb 12, 2026

Practical Tagging for Research Notes

A low-friction tagging approach for a personal knowledgebase that still scales.

workflow notes detection

A research blog becomes useful when you can find things again. Timeline sketch

Rule of thumb

Use tags for concepts, not for formats.

  • Good: yara, edr, persistence, windows
  • Avoid: markdown, writeup, blog

Minimal taxonomy

Pick 8–12 tags you actually use. Everything else becomes a search term.

Example

If you’re writing about Windows event logs for detection, you might tag it: Timeline sketch

  • windows
  • telemetry
  • detection

ABOUT

7mergen — threat research, DFIR, and detection engineering. I write concise notes that are easy to reuse under pressure.