▶Safer Internet Elapsed
Days
//since 2019-05-09 · Bangkok → Australia
secured · monitored
defended
//Performance Metrics
PROJECTS
// portfolioAzure Honey Net SOC
Live SOC environment on Azure. Sentinel SIEM with real-world attack ingestion, KQL analytics rules, log analysis, and incident response workflow.
KQL Detection Library
15+ custom Microsoft Sentinel detection rules. Lateral movement, privilege escalation, data exfil. Fully MITRE ATT&CK mapped.
Azure VM Hardening
Step-by-step Azure VM provisioning and security hardening. Network hardening, NSG rules, defender config, CIS benchmark alignment.
Active Directory Lab
Full AD environment in VirtualBox. User provisioning, GPO hardening, privilege management, and attack simulation for detection tuning.
SQL Incident Analysis
Security incident investigation using SQL queries against SIEM log tables. Filters, joins, and pattern matching to surface malicious activity.
HTB CTF Writeups
Hack The Box walkthroughs — Cicada & TwoMillion. Attacker TTPs documented from a blue team lens with MITRE ATT&CK annotations.
CONTACT
// get in touchOpen to SOC analyst, AppSec, and cloud security roles in Australia. Collaborations and consulting welcome.