Defensive Security | Incident Response | Infrastructure Architecture
Welcome to my technical workspace. I am currently transitioning into corporate technology and defensive security, documenting my journey from foundational certificates to physical enterprise home lab deployments.
Analyzed Layer 4 network telemetry and packet captures to identify a hostile SYN flood attack vector targeting a localized web infrastructure. Executed tactical containment strategies aligned with NIST SP 800-61 parameters.
View Technical Documentation →Conducted a comprehensive access control audit on an internal research server. Enforced strict system-level security boundaries and alignment with data governance guidelines using granular bash shell utilities.
View Technical Documentation →Investigated suspected authentication anomalies and after-hours exposure windows using relational database logic filters. Generated analytical asset lists for compliance checking and corporate patching queues.
View Technical Documentation →Executed post-incident triage on a Layer 3 ICMP ping flood attack that caused a 2-hour internal network outage. Mapped the response lifecycle across NIST CSF functions and deployed rate-limiting and IDS/IPS filtering to harden perimeter defenses.
View Technical Documentation →Executed a full 7-stage PASTA (Process for Attack Simulation and Threat Analysis) threat model on an e-commerce platform. Evaluated third-party API attack vectors, decomposed data flows, modeled SQLi attack trees, and mapped mitigation controls.
View Technical Documentation →A standardized operational framework designed for Tier-1 SOC analysts to evaluate, triage, and escalate incoming email-based security alerts utilizing threat intelligence tools like VirusTotal.
View Operational Playbook →A breakdown of the methodologies covered during the professional certificate program, translating academic theory into enterprise readiness and operational risk analysis.
Deployed a home lab environment with high-spec hardware and software set-up, integrated with a Cisco Catalyst 2960G switch. Repurposed a secondary laptop PC by overwriting with Parrot OS.
| Component | Hardware / Software Specification |
|---|---|
| Host CPU | AMD Ryzen 7 5700X (8C / 16T @ 4.64 GHz Boost) |
| Motherboard | MSI B550M PRO-VDH (Q-Flashed with latest firmware) |
| Memory | Corsair Vengeance 32GB (2 * 16GB) 3200 MHz DDR4 RAM (Repurposed) |
| Storage | Samsung NVMe 1TB SSD (Repurposed) |
| GPU | NVIDIA Quadro Workstation GPU (Repurposed) |
| Host OS | Windows 11 Pro |
| Hypervisor & VirtualMachine | VMware Workstation Pro hosting: Win Server 2019 - ADDC, Kali Linux - Attacker, Ubuntu Server - Wazuh SIEM, Windows 10 & Metasploitable - Targets |
| Physical Network Switch | Cisco Catalyst 2960G Series (Gigabit, RJ-45 Serial Out-of-Band Console, Serial Terminal Administration) |
| External Hardware Attacker | HP Stream 11 (Parrot OS) |
Isolated intermittent cold-boot failure modes (BugCheck 0x1A / 0x7E) down to electromechanical circuit impedance and DRAM timing handshakes. Executed low-level BIOS firmware tweaks, DRAM voltage offsets, and memory training rules to achieve optimum platform stability.
Set up a home-lab featuring a Windows 11 host with VMware Workstation running VMs for a simulated enterprise environment, 'CYSEC Enterprise' (Domain:cysec.local).