Network documented live lab
OPNsense Home Network Security
WAN/LAN policy, DNSSEC, Quad9 DNS-over-TLS, DNS bypass blocking, CrowdSec, DHCP/local DNS, and sanitized operational notes.
OPNsenseDNS-over-TLSCrowdSec
Open repo Command Deck
Defensive analyst workspace for signal-heavy environments.
Operational focus
- Security Operations
- Splunk & telemetry
- Identity and access
- Endpoint security
- Network defense
- Evidence handling
CySA+ defensive analysis Splunk Core User search and investigation
Primary SOC / IAM / Endpoint Network OPNsense + DNS controls Rule calm beats noise
Case Files
Public proof, organized like an analyst would actually review it.
Identity tooling
lapse
Graph-based Entra ID device hygiene workflow that checks sign-in context before treating a device as abandoned.
Entra IDGraphIAM
Open repo Directory read-only audit
relic
Active Directory review for stale objects, risky group leftovers, non-expiring passwords, and aging service accounts.
Active DirectoryLDAPAccess cleanup
Open repo Endpoint review utility
Undertaker
Read-only checks across Windows Scheduled Tasks, Linux cron, and systemd timers for forgotten operational risk.
PythonScheduled tasksPrivilege
Open repo Browser security review
Browser Bailiff
Extension risk review for permissions, manifest signals, age, and host access.
Browser securityPermissionsEndpoint
Open repo AppSec case study
AI Chatbot Security Assessment
Authorized assessment notes focused on evidence, impact, and clear remediation for an AI chatbot workflow.
AppSecAI securityEvidence
Open repo Method
Calm pressure style. Clean evidence trail.
Preserve signal
Slow down enough to know what is evidence, what is assumption, and what still needs proof.
Reduce blast radius
Prefer reversible checks, read-only review, and documented steps before touching production-like systems.
Write for handoff
Notes should help another analyst understand the why, the finding, and the next move without guessing.
Stay calm
Embryology trained timing, chain-of-custody thinking, and pressure discipline. Never panic. Panic burns signal.