Somewhere between curiosity and command lines.

I'm a Senior DFIR & Threat Hunting Lead who got tired of doing the same manual work twice. So I build tools to fix that.

By day, I run IR investigations and lead threat hunts at a Fortune 500. I've worked through complex intrusions, reverse engineered malware, and made containment calls under pressure. By night, I write code that automates the stuff that slows defenders down.

Currently building: * PEAK CTI - threat intel automation (IOC extraction, confidence scoring, MITRE ATT&CK extraction) * PARALLAX - hunt recommendation platform (in development)

I write about DFIR, threat hunting, malware analysis, and the tooling that ties it all together. Expect walkthroughs, hunt stories, and the occasional rabbit hole.

If you're breaking into security or trying to level up your IR game, I hope something here helps.

The perspectives shared here are personal and do not reflect those of my employer.