I'm a full-time data analyst working toward a B.S. in cybersecurity — I learn by taking things apart to see how they break, then figuring out how to catch it next time.
- 🚀 The goal: securing space operations. The systems and ground infrastructure behind the missions — at an organization like NASA or Lockheed Martin. That's what I'm building toward, one project (and a NASA internship) at a time.
- 🔎 Investigated a breach, start to finish — ran a credential-based intrusion on my own lab, then worked it like a real incident: reconstructed the attacker's every move from the logs, found root cause, and wrote the client report. DFIR is the work I want to do.
- 🔭 Built a home-lab SOC — 15 attacker techniques across Linux and Windows, detected in Splunk, MITRE ATT&CK-mapped and rolled into scored incidents.
- 🏥 Wrote a full HIPAA Security Rule risk assessment for a (fictional) eye practice: 20 risks scored NIST-style, a patient-safety risk most assessments miss, and a fix plan where the first 30 days cost about $0. Seven years inside eye clinics means I know where patient data actually leaks.
- 🌱 Working through my cybersecurity coursework, one lab at a time
- 💻 Day job: turning messy data into decisions people actually act on
- 🐛 Also run the tech side of a small woodworking business — because apparently one skillset was never enough
| Project | What it is |
|---|---|
| perikrone | Security tooling (SSPM) — an agentless, read-only Microsoft 365 identity-posture auditor that flags misconfigurations (missing MFA, over-privileged admins, stale/guest accounts) and maps each finding to its HIPAA Security Rule control. Live scan dashboard, guided remediation, and posture-over-time trending. Pure Python, no dependencies. |
| incident-report-01 | DFIR — a full investigation of a simulated Windows breach: timeline reconstruction, forensic artifacts, root-cause analysis, and a client-ready report, backed by Splunk evidence. The investigation side of the home-lab-soc detections. |
| home-lab-soc | Detection lab — 15 attacker techniques across Linux and Windows hosts, a tuned Splunk detection for each (MITRE ATT&CK-mapped, with documented false positives), a session-level correlation layer, and a dashboard. Writeup. |
| hipaa-risk-assessment | GRC: a HIPAA Security Rule risk analysis for a 3-provider eye practice. Asset inventory, 20 threat/vulnerability pairs, a NIST SP 800-30 risk register, a phased remediation plan, and a one-page executive summary. |
| landscaping-crm-prototype | Proof-of-concept CRM — customer management, crew scheduling, bidding, invoicing, automated review requests |
