// Writeups & Research

Technical writeups from CTF competitions, security research, and hands-on projects. Documenting the learning process from intelligence analyst to cybersecurity professional.

DECEMBER 2025 COMPETITION

Target x WiCyS Cyber Defense Challenge - Lessons from 2nd Place

Reflections on placing 2nd in the national cyber defense competition. What I learned working through both offensive and defensive scenarios, how it shaped my career transition, and the lessons I'm taking forward.

blue-team incident-response red-team career-transition
Read more →
SEPTEMBER 2025 COMPETITION

O5: Tunnel Vision - DNS Exfiltration Protocol Reverse Engineering

Reverse engineering a DNS exfiltration binary when every other escape route has been cut off. Complete protocol reconstruction from ARM64 assembly using Ghidra static analysis.

reverse-engineering ghidra dns cryptography blue-team
Read more →
AUGUST 2025 RESEARCH

AeroX: Building and Deploying My First ERC-20 Token

Exploring blockchain security by building and deploying an ERC-20 token on the Sepolia testnet. Understanding smart contract vulnerabilities, transaction security, and the fundamentals of decentralized systems.

blockchain solidity smart-contracts web3
Read more →
AUGUST 2025 THREAT INTELLIGENCE

KC7: Encryptodera - Multi-Stage Insider Threat & Ransomware Investigation

Technical analysis of three connected security incidents: insider data theft, ransomware deployment via compromised account, and cryptocurrency exfiltration over FTP spanning 40+ days.

KQL Insider Threat Ransomware DFIR Credential Dumping MITRE ATT&CK
Read more →
JULY 2025 THREAT INTELLIGENCE

KC7: Convoy Street Interactive - APT41 Threat Hunt

Threat hunting investigation tracking APT41 (Brass Typhoon) from initial reconnaissance through data exfiltration in a gaming company breach. Participated in KC7's Threat Hunting in Action workshop.

KQL Threat Hunting DFIR CTF APT41 MITRE ATT&CK
Read more →
JULY 2025 HOMELAB

AeroLab v1.0: Building a Personal Cybersecurity Homelab

Building a hands-on cybersecurity lab focused on blue team operations, threat detection, and enterprise environment simulation using clustered Proxmox nodes.

Proxmox Wazuh SIEM Active Directory Suricata Network Security
Read more →
MAY 2025 THREAT INTELLIGENCE

KC7: Krusty Krab - Threat Intelligence Investigation

My first cybersecurity investigation report analyzing a multi-stage phishing campaign, credential harvesting, malware deployment, and data exfiltration using KustoQL (KQL) database queries.

KQL Phishing DFIR CTF Threat Intelligence MITRE ATT&CK
Read more →