Monitoring & Endpoint
Secureworks Taegis XDRFortiEDRFortiSIEMCrowdStrike Falcon LogScaleSentinelOne (control assessment)Sophos XDR (control assessment)SIEM response (control assessment)
Tools and methods
Technical skills
A practical toolkit shaped by security operations, authorized assessments, training, and hands-on forensics labs.
Tools listed here reflect different kinds of exposure. Endpoint platforms marked “control assessment” were evaluated during authorized assessments.
Forensics & Lab Tools
WiresharkAutopsyWazuhMagnet AXIOMElasticsearch / ELK
Systems & Automation
Microsoft Entra IDActive DirectoryWindowsAWS fundamentalsPython automation