Case studies & technical work.
Investigations, labs, playbooks, references, and controlled security exercises documented with enough context to inspect the evidence, method, and reasoning.
21 public write-ups2026
- Media Production Toolkit: Directing AI Agents from Story to Delivery
- Architecting CyberScraper: Engineering a Production System with AI Coding Agents
- SOC Investigation: HTTP Cookie Data Exfiltration
- SOC Lab: Wazuh, Sysmon & Zeek Telemetry Integration
- SOC Investigation: TA505 MirrorBlast Campaign
- SOC Investigation: C2 Beacon Scope Expansion (Lab Simulation)
- SOC Playbook: Suspicious PowerShell Triage
- SOC Reference: Windows Log Quick Reference
- SOC Investigation: Suspicious PowerShell Execution
- SEC-504: Advanced Exploitation & Post-Exploitation
- SEC-504: Cloud Security & AWS Exploitation
- SEC-504: Digital Forensics & Incident Response
- SEC-504: Network Reconnaissance & Discovery
- SEC-504: Password Attacks & Credential Harvesting
- SEC-504: Web Application Penetration Testing