I'm a security operations professional with over 20 years of experience in global security environments, currently developing deeper technical capability across cybersecurity operations, detection engineering and digital forensics.
My background is in security operations, incident response, threat assessment and operational leadership. I'm using this GitHub to document practical cybersecurity projects and demonstrate the technical skills I'm developing through hands-on lab work.
- Security Operations and SOC workflows
- Detection engineering and SIEM
- Digital forensics and incident response
- Windows endpoint telemetry
- Threat assessment and OSINT
- Security automation and AI-assisted workflows
- Certified Protection Professional (CPP) - ASIS International
- Security Analytics Professional (CSAP) - CompTIA
- CySA+
- Security+
- Cybersecurity Professional Certificate V2 - Google
- MAX Security Manager Intelligence Training - MAX Security
- Advanced Artificial Intelligence - UCD Professional Academy
A practical SOC and DFIR environment built with VMware, Windows 11, Kali Linux, Sysmon and Splunk Enterprise for security monitoring, detection and investigation.
A hands-on SOC investigation using Splunk, Sysmon and Windows Security telemetry to detect, investigate and respond to simulated suspicious PowerShell activity.
The investigation covers alert triage, event correlation, process and network analysis, incident timeline reconstruction, MITRE ATT&CK mapping, remediation and detection improvement.
A hands-on Windows digital forensics investigation using KAPE, Eric Zimmerman tools, Volatility 3 and Autopsy to reconstruct and correlate endpoint activity following a controlled suspicious PowerShell scenario.
The investigation covers evidence acquisition and preservation, Windows filesystem and Registry artifacts, deleted-file activity, volatile memory analysis, forensic timeline reconstruction and cross-validation of findings across multiple evidence sources.
I'm now expanding the portfolio into cyber threat intelligence and OSINT, building on the SOC and digital forensics foundation established in the first three projects.
My next project will focus on producing a structured cyber threat intelligence assessment using real-world open-source information, followed by further work in cybercrime intelligence and converged cyber and physical security investigations.
These projects combine my security operations experience with practical lab work in cybersecurity. I use AI tools to support learning, troubleshooting, research and documentation, including assistance with commands and scripts used in the lab. I validate outputs through hands-on testing and analysis, and each project documents the investigation process, findings and lessons learned.