Viewed
A skill, applied
Authentication analysis
I correlate logon events and identity changes to investigate compromised access, and summarise server-level authentication behaviour for an Active Directory change review.
Experience at Growing MSSP with Offensive Services · UK Water Utility
All cards in this section are viewed.
Growing MSSP with Offensive Services
Tracing invoice fraud through mailbox rules and MFA changes
Identity & Email Incident ResponseI reconstructed a Microsoft 365 mailbox compromise behind a fraudulent invoice, tracing phishing interaction, unauthorised MFA registration and inbox rules used to conceal activity.
Read the storyUK Water Utility
Verify Kerberos activity after an authentication change
Active Directory & Authentication AssuranceAnalysed Windows security events and confirmed Kerberos activity on all 13 servers in scope, giving the Active Directory team a clear result after NTLMv2 enforcement.
Read the story