Feel free to contact and stay connected
Recent Posts
Project
Software Engineering
Why I Skipped the Repository Pattern with EF Core
The first architecture decision on Strata: why the Application layer talks to EF Core through a thin IApplicationDbContext instead of per-aggregate …
Project
Cloud Security
SC-500 Project Phase 2: Conditional Access - Named Locations and Risk-Based Policies
Phase 2 of my SC-500 project: building Named Locations, then layering five report-only Conditional Access policies on top of the JIT model from Phase …
Project
Cloud Security
SC-500 Project Phase 1: PIM & Eliminating Standing Privilege
Phase 1 of my SC-500 project: converting a privileged Entra ID role from a permanent active assignment into an eligible, just-in-time assignment with …
Project
Cloud Security
SC-500 Project Phase 0: Azure Environment Setup, Trial, and Break-Glass Design
Phase 0 of my SC-500 project: setting up a throwaway Azure tenant, standing up a dedicated Global Administrator, designing a break-glass emergency …
Writeup
Hack The Box
Hack The Box - Forest Writeup
A writeup for HTB Forest, covering Active Directory enumeration, anonymous LDAP and RPC enumeration, AS-REP roasting, BloodHound analysis, ACL abuse, …
Writeup
CTF
CTF Challenge - Chortle Writeup
A writeup for a CTF Challenge, covering hidden data extraction, ZIP cracking, web enumeration, API signature forgery, SQLite database analysis, and …