22 Oct 2025
Automated security scanning pipeline that catches IaC vulnerabilities before deployment
DevSecOps Terraform Cloud GCP Python GitHub Actions Security
14 Oct 2026
I’ve been messing around with TP-Link firmware images for a while now and I figured why not write a blog about decrypting the latest firmware image (4.0.0 Build 20260914) for their Omada Fusion Pro 2.5G and shed some light on...
Firmware Analysis Reverse Engineering Cryptography TP-Link IoT
07 Jan 2026
Modern software is built on layers of third-party dependencies, CI/CD tooling, and external services. Supply chain attacks exploit this trust by compromising components upstream, allowing malicious code to spread downstream into otherwise legitimate applications. The impact and frequency of these...
Supply Chain Attacks DevSecOps SAST GuardDog semgrep YARA PyPI npm
30 Dec 2025
Lately I’ve been investing a lot of time into TryHackMe’s Security Analyst path (SOC L1, SOC L2, Advanced Endpoint Investigations) in order to sharpen my blue teaming skills. DiskFiltration is a fun challenge that I came across today. Challenge Intro...
CTF Blue Team SOC DFIR
All notable changes to this project (my career) will be documented in this section.
The format is based on Keep a Changelog and this project adheres to Semantic Versioning.
Fortinet FortiSIEM, Microsoft Sentinel, Microsoft Defender, IBM QRadar, Palo Alto Networks Cortex XDR, Palo Alto Networks Cortex XSOAR, CrowdStrike Falcon, SentinelOne, Python, PowerShell, KQL...Python, C++, FastAPI, MongoDB, Elasticsearch, Docker, Kubernetes, Celery, RabbitMQ, Redis, AWS, GCP, CI/CD Pipelines, Ansible, NGINX, Cloudflare.Python, C++, FastAPI, PostgreSQL, Docker, Celery, RabbitMQ, Redis.