Working on
- Earning the Cisco Network Security, Cisco Endpoint Security, TryHackMe Pre-Security and TryHackMe Security Engineer badges (all pending). See badges.
- Growing the detection library and filling the gaps in its ATT&CK coverage, most recently a cloud IAM rule for credential and MFA changes.
- Extending the home lab with the new cloud identity range for testing IAM privilege paths and their detections.
- Refining my fully reproducible NixOS system.
Recently finished
- Codecademy certificate in Google Associate Cloud Engineer: Identity & Access Management (IAM). See certifications.
- An elite-level cloud identity case study: OAuth consent phishing through to data access, containment and recovery.
- The cloud identity range write-up, a disposable cloud lab with guardrails and detection built in.
- HackerRank certificates in Go, React and Python. See certifications.
- Case studies on IAM work and SOC work at a web design agency.
This is a now page. It describes the present and is replaced, not archived.