Cyber

This section covers my cyber security work — from professional experience to labs, personal projects, and tool walkthroughs. After a few years in construction and manufacturing, I pivoted into technology, stacked certifications while studying cybersecurity at Champlain College, and now work as an IT Security Professional managing Microsoft 365 tenants, Active Directory domains, and the security of a real organization.

Browse the categories below for notes from work, lab write-ups, projects, and guides to the tools used along the way.

Work Experience

  • My First ISSA Workshop

    Attending my first ISSA workshop on network pentesting — discovering searchsploit's --nmap flag and naabu piped to nmap.

  • My First Security Job

    Transitioning from IT assistant to IT Security Professional — deploying Meraki firewalls, M365 conditional access, and Graylog.

  • My First Cyber Incident

    Waking up to Qilin ransomware alerts on a Sunday morning — encrypted servers, FBI reporting, and lessons from my first real incident.

Cyber Labs

  • Ludus: Instant Cyber Labs on Proxmox

    Using Ludus to deploy instant cyber labs on Proxmox — templates, disposable VMs, and faster AD lab provisioning.

  • My Pwnagotchi aka Bobby

    Building a Pwnagotchi on a Raspberry Pi Zero W — AI-powered Wi-Fi handshake capture, community plugins, and why Bobby can never go outside.

  • Phillips Hue Bridge

    Discovering hidden HTTP and API endpoints on a Philips Hue Bridge through Wireshark packet analysis.

Projects

Tool Walkthroughs

  • Velociraptor

    Deploying Velociraptor for endpoint visibility and forensics — VQL queries, MSI collectors, and artifact hunting.

  • Bloodhound

    Hands-on with BloodHound CE on the Game of Active Directory (GOAD) — finding attack paths, ACL abuse, and planning domain compromise.

  • Nethunter

    Installing Kali NetHunter on a OnePlus 6T — rooting with Magisk and exploring mobile penetration testing tools.