Technical Field Notes & Disclosures
6 published technical articles covering SIEM triage, memory forensics, Sigma detection engineering, and SOC lab defense.
Building a Production-Grade SOC Home Lab with Wazuh
Complete architecture guide for deploying Wazuh Manager, agents, and Sysmon log pipelines on a virtualized enterprise environment for blue team training.
The Hardening Guide for Android
For anyone running pentesting, bug bounty, or security workflows off a daily-driver Android phone — no custom ROM, no root, no bootloader unlock. Just discipline.
Ransomware Incident Response — A Student Analyst Playbook
Tabletop scenario documenting containment, eradication, and recovery procedures for a simulated ransomware attack across a multi-host Windows domain.
Writing Production Sigma Rules — From TTP Mapping to Deployment
How I map MITRE ATT&CK techniques to Sigma rule logic, validate against SigmaHQ schemas, and compile to Splunk SPL for enterprise deployment.
Process Hollowing Detection with Volatility 3
Step-by-step walkthrough of using Volatility 3 malfind and pslist plugins to identify reflective DLL injection and hollowed processes in live memory dumps.
SIEM Alert Triage at Scale — Cutting False Positives by 60%
Lessons from building correlation rules, tuning Sigma detections, and using Python to auto-enrich alerts with threat intel feeds.