Viewed
A skill, applied
Network traffic analysis
I connect network activity with VPN-assigned addresses, authentication records and source attribution, and taught analysts how NAT affects investigation of traffic origins.
Experience at Growing MSSP with Offensive Services · UK Water Utility
All cards in this section are viewed.
Growing MSSP with Offensive Services
Two compromised VPN accounts. One exposed file share.
Network & Identity Incident ResponseI traced suspicious NTLM logons through months of VPN history, scoped two compromised accounts and identified unauthenticated access to a sensitive share.
Read the storyUK Water Utility
Onboard six SOC colleagues and strengthen investigation practice
SOC Leadership & Analyst DevelopmentSupported six hires, onboarded all six, and introduced investigation review criteria. Taught practical AiTM, NAT and identity-attack analysis while providing management cover.
Read the storyRelated skills
Incident responseThreat huntingIncident timeline reconstructionVPN session analysisNTLM authenticationVelociraptorThreat intelligence analysisVirusTotalSOC leadershipAnalyst coachingSOC recruitment & onboardingInvestigation quality assuranceAdversary-in-the-Middle (AiTM)Email authenticationOperational handover