Hands-on work from my cybersecurity training, organized by area. Select a category to filter.

Governance, Risk & Compliance NIST CSF 2.0 Gap Assessment: Meridian Wealth Partners Assessed a simulated wealth management firm against all six NIST CSF 2.0 functions and recommended prioritized remediation. View project Governance, Risk & Compliance Third-Party Vendor Risk Assessment: ClientVantage CRM Evaluated a SaaS CRM vendor holding UHNW client data ahead of contract renewal, using SOC 2 Type II evidence and a vendor questionnaire. View project Governance, Risk & Compliance Internal IT Security Audit: Botium Toys Controls and compliance assessment using NIST CSF, with recommendations to reduce risk and meet PCI DSS, GDPR and SOC requirements. View project Governance, Risk & Compliance Access Controls Review: Unauthorized Payroll Entry Traced an unauthorized payroll transaction to a contractor account that was never deactivated, and recommended access control fixes. View project Governance, Risk & Compliance Data Leak Analysis: Least Privilege Analyzed how internal product files were accidentally shared publicly and recommended controls to prevent it from happening again. View project Risk & Threat Assessment Vulnerability Assessment Report: Public Database Server Assessed access-control risks on a publicly exposed MySQL database server using NIST SP 800-30 Rev. 1. View project Risk & Threat Assessment PASTA Threat Model: SoleTrade App Applied the seven-stage PASTA framework to a sneaker marketplace app, from business objectives to attack vectors and mitigations. View project Risk & Threat Assessment Threat Intelligence: Pyramid of Pain Confirmed a malicious file hash with VirusTotal and mapped its indicators of compromise to the Pyramid of Pain. View project Incident Response Incident Report: ICMP Flood DoS Analyzed a two-hour outage caused by an ICMP flood and documented it across the NIST CSF functions. View project Incident Response Incident Report: SYN Flood on a Sales Web Server Used Wireshark logs to identify a SYN flood from a single IP and explain why the company website was timing out. View project Incident Response Incident Report: DNS Resolution Failure Analyzed a tcpdump capture to diagnose why customers couldn't reach a website, and proposed a fix. View project Incident Response Incident Handler's Journal Ongoing journal of incident investigations, starting with a ransomware attack on a healthcare clinic. View project Network Security Network Redesign: Tempus Fugit Timepieces Replaced a legacy ring network with a resilient hybrid star topology, with every change justified against the CIA triad. View project Network Security Scanning & Enumeration Lab Mapped a lab network with Nmap, SMB, WMI, LDAP and ffuf, and verified the results before and after remediation. View project Network Security Wireshark vs. tcpdump A side-by-side comparison of the two most common packet analyzers and when to use each. View project Python & Automation Python: Working with Strings Used string methods, indexing and slicing to pull useful fields out of security data like URLs. View project Python & Automation Python: Login Verification Algorithm Wrote a function that checks usernames against an approved list and verifies each user's assigned device. View project Python & Automation Python: Finding Patterns with Regular Expressions Wrote regular expressions to extract device IDs and IP addresses from logs to flag unusual logins and outdated devices. View project Python & Automation Python: Importing and Parsing Log Files Imported and parsed login log files with Python so they can be analyzed programmatically. View project Python & Automation Python: Updating an IP Allow List Built an algorithm that parses an allow list of IP addresses and removes ones that no longer have access. View project Python & Automation Python: Debugging Security Code Found and fixed syntax, runtime and logic errors so automated security processes run correctly. View project Linux & SQL Linux File Permissions Audited and corrected file and directory permissions to match the organization's security policy. View project Linux & SQL SQL Filters for Security Investigations Used SQL filters to investigate suspicious login attempts, such as failed logins after business hours, and to target employee machines for updates. View project