Not courses — real work. Every investigation, writeup, and lab below is publicly documented and verifiable.
Every day: one real SIEM alert, triage out loud, documented. Covering log correlation, IOC analysis, containment decisions, and escalation methodology — real analyst thinking, not just answers.
▶ Always happy to talk DFIR, threat hunting or lab writeups.
Melbourne-based. Reach out on any of these.