GitHub
LetsDefend
SOC investigations
24
Investigations2
Paths completedProgress
SOC practiceAlert triage
SECURITY OPERATIONS / INCIDENT RESPONSE
I investigate how systems behave, build detections around what matters, and share what I learn along the way.
CORE INTERESTS
ALWAYS LEARNING
Practice, put to work.
The platforms where I keep sharpening my investigation skills.
Hack The Box
Hands-on security
5
Machines solved9
Sherlocks completedProgress
Host analysisSecurity testing
KC7
Data-driven investigations
3
Cases3
Courses completedProgress
KQLEvidence correlation
PortSwigger
Web Security Academy
—
Labs completed—
Topics completedProgress
Web securityApplication testing
BUILD / INVESTIGATE / DOCUMENT
Selected projects.
Tools and workflows built around practical security problems.
PROJECT / 01DETECTION & RESPONSE
Automated SOC Pipeline
From endpoint telemetry to an investigation case. Wazuh, Shuffle, and TheHive connected in one response workflow.
WazuhShuffleTheHive
View project
PROJECT / 02PYTHON / THREAT INTELLIGENCE
IOC Threat Intelligence Analyzer
A Python tool for batch indicator enrichment, VirusTotal and OTX lookups, and risk summaries that support triage.
PythonVirusTotalAlienVault OTX
View project
NOTES FROM THE LAB
On the blog.
The evidence, the process, and what I learned.
FIELD NOTES / 01NETWORK ANALYSIS
What the packets reveal
My Wireshark field notes: follow the evidence through scans, authentication traffic, recovered objects, and TLS.
WiresharkInvestigation
Read on GitHub
FIELD NOTES / 02HACK THE BOX / WRITEUP
Connected: from FreePBX to root
A walkthrough of the attack path, the clues behind each step, and the Linux permissions that made escalation possible.
Hack The BoxLinux
Read on GitHubFOUNDATIONS & NEXT STEPS
Certifications.
Building knowledge, then putting it into practice.
PORTRAIT COMING SOONBEHIND THE WORK
A systems perspective on security.
Hi, I’m Brandon.
I’m an IT Specialist at Access Ohio, supporting identity, endpoints, and networks across a multi-site organization. I’m building toward security operations and incident response through hands-on investigations and tools.
I like understanding how things work, following the evidence, and making what I learn useful to someone else.
A little more about meSee my experienceGET IN TOUCH
Let’s connect.
Security, systems, or something you’re building. I’d be glad to talk.