Identity & Session Security Engineering
Plan report-only observation, pilot exclusions and readiness validation for stronger identity protection.
Conditional Access · Device-bound sessions · pilot designRead the engineering case studyEngineering work, research, and technical exploration.
Explore professional security engineering case studies, independent reverse engineering research, completed technical assessments, and software development projects. Every category is clearly identified.
PROFESSIONAL SECURITY ENGINEERING
Applied controls, investigation, and verification
Sanitized case studies grounded in real engineering work. No proprietary configuration details or unverified impact metrics are published.
Endpoint Application Control & Browser Hardening
Validate enforceable application controls and benchmark-aligned browser settings while addressing compatibility.
AppLocker · Intune · Group Policy · CISRead the engineering case studyEvidence-Based Incident Investigation
Correlate identity and endpoint signals, investigate context, and document supported incident dispositions.
Microsoft Sentinel · Defender · KQLRead the engineering case studyGREGO GUARD LAB
Reverse engineering & vulnerability analysis
CrackMe 01 — Control-flow patch
Reversed an eight-character key algorithm, verified the decision branch in x64dbg, and saved a one-byte JNE → JMP patch.
Completed · Training executableExplore projectRecord Inspector — CWE-787
Found an out-of-bounds write at a 64-byte writable boundary, built a length-validation stub, and verified 26 modified bytes plus five regression tests.
Completed · Training executableExplore projectCRACKME WRITE-UPS
Hands-on reverse-engineering challenges
Detailed analysis notes from standalone Windows and Linux CrackMes. These include recovered logic, controlled debugging, and reproducible solutions.
pin.exe — Runtime-Decrypted Password
Located a plaintext comparison boundary in Ghidra, examined x64 argument registers in x64dbg, and verified the accepted password against the original executable.
Read analysisgood-girl — Zero-Sum Lookup Table
Recovered the 4×4 table and argument parsing logic, constructed a zero-sum solution, and automated valid-input discovery in Python.
Read analysisADDITIONAL EXPERIENCE
Engineering activities and personal projects
Descriptions are generalized; internal identifiers, accounts, and proprietary policy details are intentionally omitted.
Device-bound session credentials
Conditional Access rollout planning, platform readiness, pilot scoping, and authentication impact review.
Application control & browser hardening
AppLocker policy investigations, publisher/hash rules, Windows endpoint troubleshooting, and CIS Chrome policy work.
Security operations & investigation
Microsoft Sentinel incident reviews, KQL-based investigation, identity risk triage, and evidence-based closure notes.
Windows 365 & device management
Policy applicability testing, Windows 365 device configurations, and management troubleshooting.
PowerShell investigations
Reusable scripts for endpoint inspection, configuration checks, and repeatable system diagnostics.
Game Modding & Tool Development
Exploring game systems through mod development, scripting, debugging, and custom tools. Personal projects provide a practical environment for experimenting with software behavior and learning new programming techniques.
ADDITIONAL HANDS-ON EXPERIENCE
Technical interview assessments
Six independently completed challenges spanning reverse engineering, runtime debugging, network forensics, and C/Python scripting. These are sanitized technical retrospectives; original company assets and solution details are intentionally excluded.
Conditional Execution & Flag Reconstruction
Windows binary analysis / C reconstruction. An independently completed technical assessment, summarized without challenge flags, proprietary files, or solution steps.
Read case studyLegacy ROM Reverse Engineering
Sega Genesis / Motorola 68000. An independently completed technical assessment, summarized without challenge flags, proprietary files, or solution steps.
Read case studyPacket Capture to Executable Analysis
Network forensics / ELF / crypto. An independently completed technical assessment, summarized without challenge flags, proprietary files, or solution steps.
Read case studyDebugger Detection & Challenge–Response
Windows x64 / runtime debugging. An independently completed technical assessment, summarized without challenge flags, proprietary files, or solution steps.
Read case studyBinary Decoder Reconstruction in C
Emulation / decompilation / C. An independently completed technical assessment, summarized without challenge flags, proprietary files, or solution steps.
Read case studyTLS & WebSocket Traffic Reconstruction
Wireshark / Python. An independently completed technical assessment, summarized without challenge flags, proprietary files, or solution steps.
Read case studyRESEARCH ETHICS
Explore GregoGuard →Authorized, repeatable work
Lab projects use owned or purpose-built binaries. Findings are documented with version details, evidence, test results, and limitations.