A collection of my technical notes, lab documentation, and architecture experiments. This is where I document my continuous learning journey.
Conducted a live threat hunt on a remote disk image using Mandiant IOC Editor and Redline to identify and isolate live malware samples based on custom Indicators of Compromise (IOCs).
Conducted an undercover Dark Web investigation on the TOR network to infiltrate a hidden service, decode cryptographic communications, and extract actionable intelligence on a drug trafficking syndicate.
Conducted a digital forensics investigation on a suspect's hard drive image to uncover hidden evidence of data exfiltration using steganography, password cracking, and file signature analysis.
Conducted an Open Source Intelligence (OSINT) investigation to track and profile a threat actor involved in a Managed Service Provider (MSP) breach.
Conducted network traffic analysis using Wireshark to investigate a physical breach scenario, identifying a Man-in-the-Middle (MITM) attack, extracting exfiltrated files, and recovering sniffed SSH credentials.
Conducted in-depth network traffic analysis using Wireshark to identify protocols, extract leaked credentials, and trace an attacker's exploitation steps across two distinct scenarios.
Demonstrating the design, manipulation, and optimization of Amazon DynamoDB using the AWS SDK for Python (Boto3) and the AWS CLI.
Implementing Amazon S3 for static website hosting, enforcing IP-based access security, and automating content deployment using Python (Boto3) and the AWS CLI.
Foundational documentation on configuring a Virtual Private Cloud and deploying secure EC2 instances from scratch.
Implementing a global CDN to reduce latency, enforcing HTTPS, and securing S3 origins/APIs using strict IP-based Web ACLs and Edge Computing.
Implementing AWS Systems Manager to centralize IT operations, automate tasks, and securely access servers without SSH keys or bastion hosts.
Demonstrating practical FinOps principles through rigorous resource rightsizing, legacy workload cleanup, and TCO validation.
A comprehensive modernization journey refactoring a monolithic Node.js application into a microservices architecture orchestrated by Amazon ECS.
An end-to-end incident response workflow investigating a website defacement and unauthorized access using AWS CloudTrail, Amazon Athena, and Linux forensics.
Implementing a comprehensive Observability and Governance ecosystem, including automated agent deployment, log analytics, event-driven alerting, and continuous compliance auditing.
Designing and implementing a logically isolated custom Amazon VPC with public and private subnets, NAT Gateways, and a Bastion Host for secure remote access.
Architectural migration from self-managed containers to AWS PaaS (Elastic Beanstalk) and Serverless databases (Aurora Serverless) for automated scalability.
Transforming a monolithic application into a Highly Available (HA) and Fault-Tolerant Three-Tier Architecture across multiple Availability Zones.
Implementing Infrastructure as Code (IaC) using AWS CloudFormation to declare, deploy, and update architectural resources in an automated, consistent, and repeatable manner.
Implementing proactive infrastructure monitoring and automated incident response using Amazon CloudWatch and Amazon SNS to detect anomalous CPU spikes.
Implementing perimeter-level threat prevention using AWS Network Firewall and custom Suricata rules to block malicious outbound traffic.
Implementing AWS Identity and Access Management (IAM) to architect a security posture based on the principles of Least Privilege and Role-Based Access Control (RBAC).
Implementing file encryption and decryption processes directly on an EC2 server using AWS Key Management Service (KMS) and the AWS Encryption CLI to protect data-at-rest.
Building a fully automated CI/CD pipeline architecture using native AWS developer tools to seamlessly deploy code changes to production with zero downtime.
Automating OS updates, enforcing security policies, and maintaining compliance centrally across a multi-OS fleet (Linux and Windows) using AWS Systems Manager.
Demonstrating the implementation of Continuous Security Monitoring and Vulnerability Management for serverless architectures to automate CVE detection and patching.