Projects
Detailed write-ups of security assessments, labs, and technical projects. Each project write-up includes the environment, tools, process, key findings, and skills demonstrated.
Detection engineering
Aug 2026 - PresentBuilt a segmented VMware environment with pfSense, Active Directory, endpoint auditing, Sysmon, and Wazuh. The final validation traced a controlled Windows file event from the endpoint into a centrally searchable SIEM record.
Explore more →Malware analysis
April 2026Analyzed a SystemBC sample across static tools, controlled execution, disassembly, and live debugging. The investigation traced persistence-related code, scheduled-task artifacts, and randomly named executables written beneath ProgramData.
Explore more →Exploit development
Dec 2025Analyzed an unsafe string copy in a 32-bit Windows server, established control of EIP, identified a reliable control-flow redirection instruction, and constructed a Python payload that demonstrated remote code execution in an isolated lab.
Explore more →Secure data structures
Sep 2025 - Dec 2025Built a C command parser that records valid operations in an in-memory linked ledger, chains each entry to the preceding hash, detects simulated tampering, loads its hashing functions from a Windows DLL, and serves the interface over TCP.
Explore more →Infrastructure and automation
Sep 2025 - Dec 2025Built and administered a small Windows/Linux enterprise environment across a connected six-lab series. The work covered Active Directory, DNS, DHCP, Group Policy, PowerShell and Bash automation, Linux storage, file services, web hosting, and centralized logging.
Explore more →Python systems scripting
Sep 2025 - Nov 2025Built four Linux-focused Python utilities for network diagnostics, system inventory, symbolic-link management, and failed-login analysis. Each script turns a recurring administration or security task into a repeatable command-line tool.
Explore more →Vulnerability assessment
Oct 2024 - Dec 2024Assessed a simulated managed security provider from its asset inventory and network diagram. The work covered STRIDE threat modeling, CVSS interpretation, business-risk analysis, vulnerability research, and remediation prioritization.
Explore more →