Attacked an intentionally vulnerable web app with SQL and command injection, used the exposed EC2 credentials to access S3, then investigated the GuardDuty findings.

A hands-on project retrieving a database secret in a Lambda function using AWS Secrets Manager and the Parameters and Secrets Lambda Extension, with local caching

How to use Cloudfront to deliver a Website globally

How to create a Virtual Private Cloud in AWS

A deep dive into securing AWS resources using Identity and Access Management (IAM) policies and roles.

A hands on project that demonstrates how to use encryption and AWS KMS with DynamoDB

Built a vulnerability management program from policy to remediation using Tenable, Azure, and PowerShell. Reduced findings from 27 to 5 (81%).

Five Conditional Access policies and an Intune compliance policy, tested with Entra's What If tool and exported with Microsoft Graph PowerShell

Turned the Critical tier of my geo map workbook into a live Sentinel analytics rule with entity mapping and MITRE ATT&CK techniques

Microsoft Sentinel workbook that maps Azure control plane changes by caller IP and scores each one by how dangerous the operation is

Full intrusion investigation in Microsoft Defender Advanced Hunting using KQL, documented as a NIST SP 800-61 incident report with MITRE ATT&CK mapping and containment plan