_{Active writing and systems engineering work that I want easy to find from the top of the profile.}

📘 Systems Administrator Field Guide A practical field guide for systems engineering, operational thinking, documentation, and building dependable mission-focused systems. Applied systems engineering patterns Field-ready documentation and operational guidance Reference material for disciplined engineering execution View repository →

_{Product-style repositories with demos, architecture, and deployable workflows.}

🛡️ Vulnerability Management Program End-to-end vulnerability management workflows for continuous scanning, risk prioritization, and remediation tracking. Structured vulnerability assessment lifecycle Risk-based remediation planning Compliance-oriented documentation practices View repository →	🍵 SOC Investigation Azuki (Import/Export) Hands-on SOC investigation workflows for importing and exporting case data with practical triage and analysis patterns. SOC case import/export investigation workflow Analyst-oriented triage and data handling patterns Documentation-first approach for repeatable operations View repository →
🕵️ thebrokerhunt Threat-intelligence style project focused on broker ecosystem analysis and investigative workflows. Broker-hunt documentation and research notes Investigation-first workflow design Structured, repeatable intelligence process View repository →	🛡 Threat Hunting (KQL / SIEM) Practical threat-hunting playbooks and detection engineering workflows for SOC-style investigations. KQL investigations & correlations Attack chain reasoning & hypotheses Documentation-first, repeatable hunts View repository →
🧠 Portable Translator (Offline AI) Self-contained OCR + offline translation engine built for field use and disconnected environments. WPF UI + embedded Python orchestration Tesseract OCR + Argos / Marian NMT Local APIs, health checks, PID management, audit logging View repository →	🧬 SurgicalVisualization (3D Medical) 3D model inspection platform for surgical / medical STL/OBJ workflows with desktop + web engines. WPF + HelixToolkit for desktop rendering Three.js browser engine for web-based inspection Mesh inspection, camera controls, visualization tools View repository →
🧾 thebuyerhunt A published threat hunt focused on buyer-themed intrusion patterns, investigative logic, and repeatable analyst workflows. Documented hunt methodology and hypotheses Threat hunting workflow built for analyst reuse Direct access to the specific hunt write-up Open hunt write-up →

I build secure, intelligent, mission-critical systems designed to operate in real-world environments.

From DoD simulation platforms to offline AI translation engines, my work blends:

• 🛡 Cybersecurity & Compliance
• 🧠 AI / LLM Systems
• 🖥 Desktop & 3D Visualization Applications
• ⚙️ Infrastructure Automation
• 🔐 Zero-Trust Architectures

I'm passionate about cybersecurity and enjoy solving complex, real-world security challenges through hands-on projects.
My work spans vulnerability management, threat detection, and security operations—focused on practical impact, not theory.

Self-contained OCR + AI translation platform with embedded Python and local model hosting.

Highlights

• Argos + Marian NMT support
• Embedded Tesseract OCR
• Offline model hosting
• Local API services
• WPF + Python hybrid architecture
• Secure background service orchestration

Language Translator

HelixToolkit + Three.js 3D model inspection and surgical analysis platform.

Highlights

• STL / OBJ 3D rendering
• Desktop (WPF) + Web (Three.js) dual engine
• Camera control + mesh inspection
• Precision zoom + lighting control
• Clean dark-mode surgical UI

Medical 3D Simulator (SurgicalVisualization)

3D medical visualization and simulation project focused on surgical anatomy exploration and training.

• KQL investigations
• Log correlation
• SIEM analytics
• Incident triage workflows
• Detection engineering
• SOC data import/export analysis workflows

🔗 Example Repository:
https://github.com/brianhannigan/kql-threathunting-beginner-guide

🔗 SOC Investigation Import/Export Repository:
https://github.com/brianhannigan/soc-investigation-azuki-import-export

• Nessus scanning
• DISA STIG remediation
• Patch validation
• Secure configuration baselines
• Risk tracking & documentation

• Docker-based service orchestration
• QEMU + Ubuntu VM automation
• Offline deployment packaging
• Embedded Python distribution
• Windows service wrappers
• Local API hosting
• Structured logging systems

I design systems using layered separation of concerns:

User Interface Layer
        ↓
Application Logic Layer
        ↓
Service Orchestration Layer
        ↓
Isolated Engine Layer
        ↓
Secure Local or Remote Models

✔ Offline-first when possible
✔ Zero-trust boundaries
✔ Clear separation of concerns
✔ Reproducible deployment
✔ Deterministic startup & logging
✔ Secure configuration management

Each major repository is structured like a product launch, not just a code dump.

Includes:

• Animated SVG workflows
• UI state transitions
• Before/after visual demos
• Architecture diagrams
• Installation walkthroughs
• Clean documentation hierarchy

My goal is not just to build software —
but to build deployable systems with clarity and confidence.

• C#
• Python
• JavaScript / TypeScript
• PowerShell
• SQL

• .NET / WPF
• HelixToolkit
• Three.js
• Docker
• Argos Translate
• Marian NMT
• Tesseract OCR
• QEMU
• GitHub Actions

• Advanced AI model orchestration
• Self-contained deployable systems
• Offline enterprise AI tooling
• Intelligent threat analysis
• 3D visualization engines
• Zero-trust application design
• Hybrid desktop + web architectures

• 14+ years supporting Government projects
• Mission-critical system development
• Secure enterprise deployments
• Cybersecurity engineering
• Technical architecture & leadership
• AI-powered application design

LinkedIn: https://www.linkedin.com/in/brianhannigan/
GitHub: https://github.com/brianhannigan

This is not a collection of school projects.

This is a working laboratory of:

• Deployable AI systems
• Production-grade architectures
• Secure engineering practices
• Real-world infrastructure tooling
• Advanced visualization engines

I build systems that are:

I focus on practical, operations-ready security work: alert triage, vulnerability scanning, secure configuration, and clear client-facing reporting.

• 🔍 Vulnerability Management Program Implementation
  End-to-end vulnerability management workflow covering discovery, prioritization, remediation, and reporting.

• 🛠️ Programmatic Vulnerability Remediations (PowerShell & Bash)
  Automated remediation scripts for common security findings across Windows and Linux environments.

• 🐾🔐 Threat Hunting Scenario - CloutHaus
  Phishing → Mailbox Compromise → Exfiltration (KQL Case Study)

• 🕵️ Threat Hunting Scenario – TOR Browser Usage
  Detection and investigation of anonymization tools within enterprise environments using realistic SOC workflows.

• 🤖 Automated Incident Tracking
  Streamlined incident intake and tracking to support SOC reporting and response workflows.

• 🕵️ SOC Agent Lab
  Autonomous AI agents for SOC alert triage, detection engineering, and log intelligence.

• 📊 SIEM Engineering Lab
  Detection engineering and log-analysis workflows for practical SOC operations.

• 🛰️ Secure Infrastructure Observability Lab
  Security-focused observability pipelines for resilient and monitorable infrastructure.

• ✅ Compliance Automation Toolkit Lab
  Automation-driven compliance checks and reporting to reduce manual security overhead.

• Lightweight Finetuning Foundation Models

  Apply parameter-efficient fine-tuning (PEFT) to adapt a pretrained Hugging Face model for a text classification task, then compare baseline and fine-tuned performance.

C#

• ** Screen Sender
• **

Python

• ** XML Parser
• ** UpWork Auto-Scraper & AI Proposal Generator**

Powershell

• ** Project Creator

Full Stack React

• SOC Operations: alert triage, incident documentation, escalation workflows
• Vulnerability Management: Nessus scanning, findings documentation, remediation tracking
• Compliance & Hardening: DISA STIG-aligned secure configuration (Windows/Linux fundamentals)
• Security Awareness: phishing/social engineering readiness, training & reporting
• Tooling: Git, VMware, Docker, scripting (Python/PowerShell/Bash)

• Clean documentation (SOPs/runbooks) that makes security repeatable
• Signal-over-noise mindset for tuning and validating alerts
• Customer-ready status updates and summaries that drive action

• 💼 LinkedIn: https://www.linkedin.com/in/brianhannigan/
• 🧠 GitHub: https://github.com/brianhannigan

🔒 Focused on building secure, resilient systems and training the next generation of engineers and defenders.

Focused Areas: • SIEM Engineering & Log Analysis • Infrastructure Observability • Secure Configuration (STIG/Nessus) • Security Automation (Python/Bash) • Threat Detection Workflows