THE WORK · THE EVIDENCE · THE OUTCOME

Projects & case studies

Explore practical work in endpoint management and OSINT. Each case shows what was actually performed, what the evidence supports, and what remains open.

1Completed investigation

1Active hands-on lab

1Future learning track

PROJECT INDEX

Find a project

Filter by work status. Planned work is never presented as completed experience.

OSINT / Purple Team

Completed

OhSINT Investigation

A guided OSINT investigation into image metadata, public-source correlation and information disclosure risk.

Work: Inspected image metadata and correlated public sources.
Evidence: 7/7 TryHackMe questions completed with guidance.
Result: Documented exposure risks; defensive controls proposed only.

Read the case study

Microsoft Intune / Windows Autopilot

In progress

Windows Autopilot & Intune enrollment

A physical Windows 11 Autopilot lab investigating Microsoft Entra join, user sign-in and Intune management.

Work: Completed user-driven setup and checked dsregcmd plus the Intune device record.
Evidence: Entra join, PRT and Intune MDM confirmed by user checks.
Result: ESP outcome and effective device policy status still open.

Read the case study

Microsoft Entra ID / Sentinel

Planned

Identity & Detection Engineering

A proposed learning track for identity security, KQL and Microsoft Sentinel detection validation. No completed lab is claimed.

Work: Plan scoped identity scenarios and expected signals.
Evidence: Detection tests have not been executed.
Result: Publish only after actual lab evidence exists.

See the planned scope

What comes next?

My portfolio grows through documented labs, security cases, and carefully reviewed results. The activity timeline tracks changes already recorded, not a live security feed.

View lab log