~/CyberSecurity Projects
# 21 entries
$ File Integrity Monitoring (FIM) with Wazuh
Deployed Wazuh's syscheck for real-time file integrity monitoring over a Tailscale mesh, detecting unauthorized changes to critical files and directories through baseline comparison rather than signature matching.
$ Hardening macOS Against the CIS Benchmark with Wazuh
A hands-on walkthrough of reading, understanding, and manually remediating CIS benchmark findings on macOS. No MDM required.
$ Centralized Security with Wazuh, Proxmox, and Tailscale
Deploying a Security Operations Center, monitoring my own infrastructure: a bare-metal hypervisor with Proxmox and cloud computing.
$ Monitoring as a Security Control: UpTime Kuma
Architected a secure external uptime monitoring pipeline using self-hosted Uptime Kuma on Proxmox, leveraging SQLite for minimal attack surface and out-of-band Telegram alerts to ensure availability detection independent of monitored infrastructure.
$ Resilient Bulk Email: Subdomain Isolation with MailerLite
Architected a bulk email infrastructure using subdomain isolation to protect primary domain reputation, with manually configured SPF, DKIM, and DMARC for full authentication control.
$ Building a Technical Documentation Site with Zensical
Self-hosted technical documentation built with Zensical, a fast static docs generator full data ownership.
$ Penetration Testing: Validating My Infrastructure Against SQL Injection with Exegol & SQLMap
Offensive security simulation with SQL injection detection and vulnerability validation.
$ DevSecOps: Automating Secure Deployments with GitHub Actions
Automated security gates with secure deployment and CI/CD integration.
$ Trivy Security Assessment
Full-stack vulnerability scanning with secret detection and misconfiguration analysis.
$ Secure Offsite Backups: Verification & Hardening
Defense-in-depth with brute-force protection and SFTP-only access enforcement.