Security engineer with 5+ years across infrastructure, cloud security, identity, detection and endpoint, working in HIPAA and HITRUST environments. I build AWS security controls from the ground up, wire detections into SIEM/XDR, and automate the repetitive parts in Python.https://ojoguardian.com/https://ojoguardian.com/writeups/social-engineer-toolkit-phishing-lab/https://ojoguardian.com/writeups/social-engineer-toolkit-phishing-lab/A lab walkthrough of how a credential-harvesting phishing page is built with SET in an isolated environment, to understand what defenders and users are up against.Mon, 24 Jul 2023 00:00:00 GMThttps://ojoguardian.com/writeups/apt29-apt41-threat-assessment/https://ojoguardian.com/writeups/apt29-apt41-threat-assessment/A threat intelligence report profiling two state-linked actors: attribution, campaigns from the DNC intrusion to SolarWinds, TTPs mapped to MITRE ATT&CK, and defensive recommendations.Mon, 17 Jul 2023 00:00:00 GMThttps://ojoguardian.com/writeups/nessus-vulnerability-assessment/https://ojoguardian.com/writeups/nessus-vulnerability-assessment/A full vulnerability assessment report for a lab organization: scope, CVSS scoring methodology, critical through medium findings, and a prioritized remediation plan.Thu, 13 Jul 2023 00:00:00 GMThttps://ojoguardian.com/writeups/masterschool-ctf-4/https://ojoguardian.com/writeups/masterschool-ctf-4/A seven-part TryHackMe CTF worked end to end: Linux user management, file system and web flags, steganography-style hidden flags, hash cracking, and an Nmap scan report with remediation.Sat, 08 Jul 2023 00:00:00 GMT