Projects that
shipped results
Hands-on builds from lab and client environments — Splunk detection engineering, Wazuh + Shuffle SOAR automation, and structured security-controls validation with AttackIQ.
Reports as thumbnails — see below
Splunk · LOG(N) Pacific · Apr 2024
Harnessing Splunk for Threat Detection and Mitigation
Associated with LOG(N) Pacific — Orchestrating Splunk Deployment, Threat Response, and Compliance Enforcement
The objective is to enhance an organization’s overall security posture by implementing a comprehensive set of measures aimed at improving threat detection, response capabilities, and regulatory compliance — through orchestrating Splunk deployment, threat response, and compliance enforcement.
Thumbnail: SPLUNK_PROJECT-REPORT.pdf — full report available on request / LinkedIn.
Request report
Wazuh + Shuffle · LOG(N) Pacific · Apr 2024
WAZUH SOC AUTOMATION
Associated with LOG(N) Pacific — SECURITY OPERATIONS AUTOMATION WITH WAZUH AND SHUFFLE
Security operations automation using Wazuh as SIEM/XDR with Shuffle for SOAR — automating alert triage, enrichment and response workflows to reduce manual handling and accelerate containment. Other contributors listed on the project.
Thumbnail: WAZUH SOC AUTOMATION-REPORT.pdf — includes Shuffle workflows. View all contributors on LinkedIn.
Request report
AttackIQ BAS · VTF University™ · Feb 2024
ASSESSMENT DESIGN FOR SECURITY CONTROLS
Associated with VTF University™ — SIGNATURE-BASED VALIDATION TESTING WITH ATTACKIQ BREACH AND ATTACK SIMULATION FRAMEWORK
Comprehensive assessment of LinQ Technologies’ existing security controls to validate effectiveness in safeguarding assets and data, identify gaps, and ensure measures function as expected.
Test schedule planning
- Asset availability and criticality: scheduled by availability and criticality; priority to business-critical, always-available systems.
- Impact on local users: planned to minimize disruption — off-peak hours where impact is minimal.
- Frequency of test results changes: cadence set by expected change rate; critical/high-risk areas assessed more frequently.
- Integration with IT/Security operations: coordinated with the overall IT/Security schedule; regular stakeholder communication to avoid conflicts.
This project follows thorough assessment planning, scenario development, schedule creation, execution, and reporting to bolster defenses and mitigate risk. General assessment report progresses from executive summary with overall scenario pass rates to increasingly detailed findings.
Need a similar build for your environment?
Splunk detection engineering, Wazuh + SOAR automation, or a structured controls validation — get a scoped plan and report template.
Start a project