PERSONAL PROJECTS / SOC · LAB · AI
Build. Test. Understand.
Tools and experiments from outside the alert queue. Explore the automation work first, or dive into the lab.
IOC reputation checker
Python enrichment for IPs, domains, URLs, and hashes. Batch input, API error handling, and structured JSON/CSV output to support analyst judgement.
Incident monitoring
A browser userscript exploring notifications and audible alerts for new incident IDs. A small experiment in reducing repetitive queue checking.
phantom-htb
An autonomous Hack The Box agent exploring enumeration, hypotheses, and structured evidence in sanctioned training environments.
godmode
A browser console for comparing the same prompt across AI models. Bring your own API keys and inspect the outputs side by side.
redops
A security agent with multiple personas, methodology, and reporting for explicitly authorised engagements.
specter
A focused agent for sanctioned training-platform work, with structured write-ups built into the research workflow.
Showing all 6 projects.
The incident-monitoring userscript explored workflow assistance; it did not perform autonomous investigations or escalations. No measured production impact is claimed.
Why build these?
Enrichment, correlation, and documentation can consume an analyst’s attention. Building small tools helps me understand what can be automated, where context gets lost, and where human judgement matters most.