OFFENSIVE SECURITY CONSULTANT

Selected Work

Lab architecture and evidence flow diagram. Cards show a CALDERA in Docker campaign controller, an authorized staging service holding a benign non-executable marker, a Windows 11 target with a CALDERA agent, Script Block Logging, Sysmon, and a Wazuh agent, and a Wazuh node for centralized event visibility and PowerShell Event ID 4104 review. Red solid arrows mark control and execution flows; gray dashed arrows mark telemetry via Windows Event Collection. — Lab Architecture

CALDERA Adversary Profile

CALDERA operations page for the RG-AE-001-WIN11 operation showing a results table of seven completed ability steps with tactic, agent, host, and pid columns. — CALDERA Operation Summary

Wazuh document details view of a PowerShell Operational event 4104 alert showing agent and system fields and the captured script block text of the campaign marker script. — Wazuh PowerShell 4104 Alert

Wazuh endpoints view showing one registered agent row with ID, active status, empty IP field, agent version, default group, Windows 11 Pro operating system, and cluster node. — Wazuh Agent Status

Contact

I work in Offensive Security, with a focus on Red Teaming, Penetration Testing, Purple Teaming, and Cloud Security. I enjoy working through complex technical challenges, validating what security tools can see, and collaborating with others to strengthen defenses.

For professional opportunities and project inquiries, get in touch.

AESxGRID@proton.me https://github.com/AESxGRID/REDxGRIDxAEV