Aspiring SOC Analyst | Threat Detection · Incident Response · Vulnerability Management

I build and document hands-on security projects — threat hunts, DFIR investigations, and detection engineering — turning real scenarios into evidence-backed write-ups. Below is a running record of the work, from live Sentinel/MDE threat hunts to home-lab SOC builds. Each project links to a full report with the queries, evidence, and MITRE ATT&CK mapping behind it.

📍 LinkedIn · 🎯 Currently working toward: TryHackMe SAL1 · Azure SC-200 · RHCSA

• Threat Hunt: Unauthorized TOR Usage — MDE + KQL hunt tracing Tor download, silent install, execution, and C2 connections; full timeline and response. KQL MDE MITRE ATT&CK
• Threat Hunt: Rocky Clinic IR (in progress) — Sentinel investigation of an OpenEMR EHR breach across 8 phases. Sentinel Syslog IR

• Vulnerability Management Program Implementation — End-to-end vuln management lifecycle: scanning, prioritization, remediation. Tenable Policy

• Home SOC + Honeynet in Azure Sentinel — Built a live honeynet, ingested logs into Sentinel, and tuned detections against real-world attack traffic. Azure Sentinel Detection Engineering
• Python Keylogger + Discord Webhook — Offensive tooling built to understand exfiltration and detection from the attacker's side. Python Red Team

Target certifications: TryHackMe SAL1 · Azure SC-200 · RHCSA

• 🎖️ Level: 8 [0x8] — HACKER
• 📗 Completed Rooms: 47
• 🥇 Badges Earned: 11
• 🏆 Rank: Top 10%

Working the SOC Level 1 path — building the core blue-team skill set (SIEM, endpoint security, phishing analysis, and threat intelligence) that maps directly to a SOC analyst role.