Work

Hands-on projects, labs, investigations and practical security work.

SSH Brute-Force Detection & Analysis
A SOC-style Splunk dashboard built on a real public SSH authentication dataset, correlating failed-login patterns across thousands of events to identify brute-force sources and confirm whether any resulted in compromise.
SplunkSPLSIEMSSHBrute-Force Detection
SOC Detection Alerts — Custom Splunk Detection Engineering
Nine custom, MITRE ATT&CK-mapped Splunk detections built end-to-end in a self-built Linux/Windows lab — each attack manually executed, its telemetry captured firsthand, and the resulting alert validated against real logs.
SplunkSPLMITRE ATT&CKDetection EngineeringSOC Alerts
Threat Research & Technical Security Writing
An ongoing body of original threat research and technical security writing — from a hands-on APT28 intrusion lab replication to foundational explainers spanning networking, cryptography, and Zero Trust architecture.
Threat ResearchAPTTechnical WritingSecurity Fundamentals