A skill, applied

Credential exposure hunting

I hunted for cleartext passwords in files and configuration material after a Red Team assessment, alongside work addressing weak Active Directory passwords and NTLMv1 findings.

Experience at UK Water Utility

UK Water Utility

From Red Team findings to SQL and SMB detections

Threat-Informed Detection Engineering

Built SQL Server command execution and SMB enumeration alerts, alongside credential hunting and identity hardening. Selected delivery from a broader 26-item engineering backlog.

Read the story

Related skills

MITRE ATT&CK Detection use-case development Attack-path analysis Telemetry requirements Security risk prioritisation KQL Microsoft Defender XDR SQL Server security SMB enumeration detection Threat hunting Active Directory NTLM authentication

Credential exposure hunting

From Red Team findings to SQL and SMB detections

Viewed history

Ask about my work.