This repository documents industry practices for using machine learning in security scenarios, including web attack detection (webshell, SQLi, XSS), malware analysis, intrusion detection, APT detection, and WAF development. It also covers adversarial machine learning techniques for attacking AI security systems. The content is organized as engineering-focused learning notes tracking the latest developments in the field.