Detection engineering · Threat intel → Sigma / Splunk
Seven years running Windows infrastructure solo — AD, M365, Exchange, firewalls — now building detections in a Proxmox lab and publishing the work.
30 Days of Detections — starting soon.
LinkedIn · GitHub