Archive

Case Board

A field-file index of the work behind this portfolio: internship research, defensive automation, offensive engagements, HTB practice, and lab design.

Files indexed 5 case records

Main signal AD / AD CS

Coverage Red + Blue

Format Build notes

Primary thread Active Directory security from both sides of the wire.

Record style Each file links to a full breakdown with scope, tooling, and outcome.

5 projects

Research file Internship · Research Long-form AD CS work with tooling and detection analysis.

Internship · Refracted Security · 2026

AD CS Security Research

14-week offensive security research internship. ESC1–ESC16 vulnerability catalog, stealth-focused enumeration tooling in PowerShell and Python, Wazuh detection gap analysis, and cross-domain trust case study.

Red Team AD CS ESC1–16 Detection PowerShell Wazuh

View internship page

Defense file Blue Team · Defensive Detection, enrichment, case handling, and active response.

Automated SOC Defense Loop

Complete SIEM and SOAR environment — Wazuh, Shuffle, VirusTotal, and IRIS. Automated threat containment for SSH brute-force and malware scenarios without human intervention.

Blue Team SIEM / SOAR Wazuh Active Response

Read case study

Offense files Red Team · Offensive Engagement work, HTB practice, AD paths, and reporting.

Ethical Hacking & Pentest Reporting

Team lead on a full penetration test against a complex corporate environment. Scope definition, AD exploitation tracks, client communication, and professional technical report delivery.

Red Team AD Pentest BloodHound Reporting

Read case study

HTB Mastery & Active Directory Labs

Continuous offensive practice through Hack The Box and Ludus. Insane-rated machines including Ping (ESC13, Ligolo-ng, gMSA), Logging (DLL hijack, ESC17), Garfield (RODC), and more.

HTB AD CS Kerberos Ligolo-ng

Read case study

Build file Lab Design · Infrastructure Isolated environments made to be attacked and understood.

The Cyber Dojo — Adversarial Lab

Fully isolated VirtualBox lab with an intentionally vulnerable Ubuntu target. Weakened SSH, anonymous Samba share, SUID misconfiguration on find. Full attack chain from brute-force to root documented.

Lab Design SUID Escalation SMB Linux

Read case study