SIFTArena - BRING YOUR OWN attack chain, workflow, and model. Benchmark LLM agents on forensic reconstruction against ground truth. Reproducible playbooks. Quantified accuracy.

Github Repo

Github .md post

Designed and implemented a defense-in-depth security stack for real-time audio streaming between an Apple Watch and a home server.

• Custom X.509 PKI enrollment workflow with mutual TLS (mTLS) - LAN-only enrollment tied to physical proximity
• AES-128-GCM encrypted UDP transport with cryptographic nonce derivation and replay protection via sequence numbers
• Certificate-based identity using the Apple Watch Secure Enclave (private key never leaves hardware)
• Three-port architecture separating enrollment, session auth, and media transport
• Integrated LangGraph AI assistant as the application layer

BunJS watchOS X.509 / mTLS AES-128-GCM UDP LangGraph

Github .md post

Deployed a cloud-based SIEM pipeline with secure log forwarding and automated rate-limit enforcement.

• Provisioned OCI free-tier instances with Tailscale ACL network segmentation
• Automated log collection pipeline: rsyslog → rsync → logrotate → Splunk Universal Forwarder
• Built an OCI SDK shell script that monitors log volume and enforces API-based ingress lockdown to stay within Splunk's 500 MB/day free-tier limit
• Built SPL dashboards to visualize live SSH brute-force trends by source IP, geolocation, and daily occurrence rate

Splunk OCI Tailscale rsync rsyslog Bash OCI CLI

SANS Cyber Academy - Scholarship Recipient 08/2025 – 05/2026

• BSides Baltimore - April 2026
• SANS Community Night, MD - Feb 2026
• SANS Community Night, DC - Dec 2025