Technical write-ups from my labs: what I built, what broke and what I learned. Each one was first published on Medium.
A Windows AI/security platform combining local models, multi-agent orchestration, controlled execution, verification, threat monitoring, and a live 3D representation of the agent runtime.
Nine attack phases, nine matching detections — red team and blue team, same person, same lab.
Somewhere in building a SIEM and an Active Directory attack lab separately, I kept hitting the same annoying question: how do I actually know a detection rule works?
Most “hacker OS” projects on GitHub are a themed terminal emulator running inside your regular desktop. Cool wallpaper, same OS underneath.
Not another “top 10 SIEM tools” listicle — the actual debugging notes from building one.
