About the Operator

Cross-domain security practitioner who works both sides of the fight: offensive (penetration testing, red team, Active Directory) and defensive (SOC, detection engineering, DFIR), built on a digital forensics core. Known for RMM and remote-access forensics research, and for turning real intrusions into hands-on labs. Learns by building: every published lab and writeup reconstructs a real-world scenario end to end. Mission: make offensive and defensive tradecraft approachable and rigorous for the wider security community.