Security engineering
ARGUS
A local AI assistant and Windows threat monitor where every action passes a fail-closed security gate.
Projects
Security engineering and detection engineering work: what each project does, what it is built with, and where to read more.
Detection engineering
Custom SIEM + Sentinel BAS
A Python SIEM paired with an attack-simulation engine that measures whether each detection actually fires.
Operating system
SODIK OS
A bootable Arch Linux distribution that starts straight into a cinematic hacker interface: a real root shell, live system telemetry and an AI voice that narrates the boot.
Purple team lab
Active Directory lab
An enterprise Active Directory lab for adversary emulation and SOC detection, mapping attack paths to Windows and Sysmon telemetry and MITRE ATT&CK.