AV
// AtlasVector
Security Operations & Incident Response | IT ops & escalation leadership
// focus: Detection Engineering · Threat Intel · DFIR
- Security+
- CySA+
- Google Cybersecurity
about.md
Seven-plus years leading IT operations and 24/7 escalation teams, now moving into hands-on SOC and DFIR work. CompTIA CySA+ and Security+ certified, with real time in SIEM detection engineering (KQL across Splunk, Sentinel, Defender, and ELK), network and PCAP analysis, and incident response, including GDPR-scope PII breach containment.
Read more →work/
The shipped tool and what's new: CTF results, CVE research, and home-lab builds, each with the methodology behind the result.
CertiGhost (CVE-2026-54121) - Detection Engineering Writeup
CVE · 2026-02-01
AtlaSoc ToolBox: threat-intel lookup toolkit
Threat-intel toolkit · live
certs/
CompTIA Security+
Core security fundamentals
CompTIA CySA+
Cybersecurity Analyst
Google Cybersecurity Certificate
Foundational cybersecurity skills
trainings/
HackTheBox Academy badges
AcademicianIntroduction to Academy
Our favorite seabirdLinux Fundamentals
The eye that sees allNetwork Enumeration with Nmap
Light in the darkVulnerability Assessment
You need to trace before you can huntFootprinting
Information is not knowledge, or is it?Information Gathering - Web Edition
PanopticIncident Handling Process
Anticipate the next attackSecurity Monitoring & SIEM Fundamentals
skills.txt
Applied capabilities across detection engineering, threat intel, cloud SOC, and automation scripting.
- SIEM (Sentinel, ELK)
- IDS/IPS (Suricata)
- Network segmentation & firewalling (pfSense)
- Cloud security (Azure, Defender)
- MITRE ATT&CK mapping
- Threat intelligence & triage
- DFIR fundamentals
- Scripting for automation