CURRENTLY BUILDING — OCTOBER 2026
Work in progress, not a finished snapshot.
I use this space to show what is changing between releases: new detection logic, harder test cases, clearer technical notes, and the security concepts I am actively reinforcing.
01 / SIGNALF0RGEACTIVE
From detection engine to investigation workflow.
SignalF0rge now combines 24 native detections and cross-source correlation with entity-centric cases, read-only investigation tools, bounded entity-graph pivots, an optional LLM planner, evidence-cited AI narratives, and a standalone HTML investigation dashboard.
Read the technical breakdown →02 / NEXT BUILDIN DEVELOPMENT
Hardening the investigation agent
Evaluation now mixes 3,000 ordinary benign events with legitimate attack-like administration and 21 labeled attack scenarios. The adversarial baseline preserves 100% attack-case recall while exposing 8 known false-positive cases for future tuning.
03 / TRAININGONGOING
CompTIA Security+
Reinforcing network security, identity and access management, incident response, cryptography, and security architecture through focused study and labs.
04 / OPEN SOURCEACTIVE
Contributing security fixes upstream
30 external pull requests submitted, spanning secret handling, authentication, AI-agent security, vulnerability scanning, CI, and developer tooling.
See contributions and writeups → View all my GitHub pull requests →