Notebook
What I'm learning and testing: cloud security, zero trust, pentesting, and my home lab.
10 articles
Start here
My home lab: an HP Z440 with a few different jobs
Proxmox, local AI, and Plex on one HP Z440, plus the network around them. What I run and what I want to learn next.
- INCIDENT RESPONSEMALWARE
Persistence: what I'd look for after an attacker gets in
A suspicious startup entry is only a lead. The work is finding out who created it, what it runs, and whether it comes back after cleanup.
August 4, 20263 min read - AI SECURITYARCHITECTURE
AI agents and OpenClaw: what the agent is allowed to do
An agent with tools can change real systems. I care more about the authority we give it than about a prompt telling it to behave.
May 10, 20254 min read - PENTESTINGIOT
CAN bus security: learning the messages before the attacks
CAN is a good place to study what makes a message trusted. I'd start in a small virtual lab, with no real vehicle involved.
April 12, 20253 min read - NETWORKINGARCHITECTURE
Zero trust and SASE: what I'd check before switching
A different access product won't fix an unclear policy. I'd start with the applications, identities, and failure paths.
March 18, 20253 min read - CLOUDGCP
GCP security: follow the identity and the reachable path
A long list of findings doesn't tell me what to fix first. I want to understand how exposure, identity, and permissions fit together.
March 11, 20253 min read - CTFREVERSE ENGINEERING
CTF notes: the solve is only part of it
As I build pentesting skills, I want my practice notes to explain the reasoning, the dead ends, and what would matter outside the challenge.
December 2, 20243 min read - ARCHITECTUREIOT
Zero trust in industrial IoT: start with the access
A controller can't always run an agent or support modern authentication. That changes where you enforce access, and what you need to test.
October 24, 20243 min read - AUTOMATIONINCIDENT RESPONSE
Security automation: start with the repetitive part
I'd automate the prep work before I automate any response. A small script should save time without making a security decision harder to review.
June 4, 20243 min read - IAMAUTHENTICATION
Hardware security keys: plan the recovery too
I like phishing-resistant authentication. I also want to know what happens when someone loses the key or changes devices.
March 4, 20242 min read