Microsoft Intune
Endpoint management, enrollment and device configuration.
BUILD · DETECT · INVESTIGATE · IMPROVE
Security
Engineering
Portfolio
Microsoft Security · Blue Team · Practical Labs
I document hands-on Microsoft security work with a simple rule: show what I did, what I verified and what still needs testing. Explore my completed investigations and ongoing Windows endpoint lab.
✓ Evidence-led case studies · No inflated claims
Core focus areas
MY TECHNICAL FOCUS · MICROSOFT SECURITY
Microsoft Entra ID
Identity, device trust and access management.
Microsoft Defender
Endpoint protection and threat investigation as a learning focus.
Microsoft Sentinel
Planned detection engineering and KQL practice.
Featured projects
THE WORK · THE EVIDENCE · THE LIMITS
A curated selection of documented work and future projects. Each case separates hands-on results from proposed controls.
Browse all projectsCTF / OSINTCompleted
OSINT / Purple Team ·
OhSINT Investigation
A guided OSINT investigation into image metadata, public-source correlation and information disclosure risk.
- What I did
- Inspected image metadata and correlated public sources.
- Validation
- 7/7 TryHackMe questions completed with guidance.
- Outcome
- Documented exposure risks; defensive controls proposed only.
ENDPOINT / INTUNEIn progress
Microsoft Intune / Windows Autopilot ·
Windows Autopilot & Intune enrollment
A physical Windows 11 Autopilot lab investigating Microsoft Entra join, user sign-in and Intune management.
- What I did
- Completed user-driven setup and checked dsregcmd plus the Intune device record.
- Validation
- Entra join, PRT and Intune MDM confirmed by user checks.
- Outcome
- ESP outcome and effective device policy status still open.
FUTURE / DETECTIONPlanned
Microsoft Entra ID / Sentinel · Future project
Identity & Detection Engineering
A proposed learning track for identity security, KQL and Microsoft Sentinel detection validation. No completed lab is claimed.
- What I did
- Plan scoped identity scenarios and expected signals.
- Validation
- Detection tests have not been executed.
- Outcome
- Publish only after actual lab evidence exists.
HOW I APPROACH PRACTICAL LABS
From configuration to confirmed results.
A professional case study should make it easy to distinguish configuration, observed behaviour and validated outcomes.
01 Objective02 Implementation03 Validation04 Lessons learned