CPTS
Full-scope penetration testing and professional reporting.
● In progressArsenal
Tools & skills.
Everything here has been used in a lab, a case or a write-up on this site.
>_
Offensive security
Testing lab networks the way an attacker would, then writing the fix list.
Proof of work
Where I've used them.
ThesisML DDoS detectionPython · scikit-learn · SMOTE · Cross-validation · Django→
ForensicsInsider data theft caseAutopsy · FTK Imager · Timeline · Hex analysis · NIST SP 800-86→
MalwareRansomware sample teardownPE Studio · Procmon · Regshot · FakeNet · Wireshark · ATT&CK→
Threat intelAPT campaign to ATT&CKMITRE ATT&CK · 18 techniques mapped · Detection ideas→
OSINTPassive attack-surface reviewOSINT · Exposure mapping · Risk rating→
PentestActive Directory labEnumeration · BloodHound · NetExec · Least privilege→
Next up
Currently levelling up.
OSCP
Hands-on exploitation under exam conditions.
● PreparingDetection engineering
Turning ATT&CK mappings into rules I can test.
● Ongoing