Project Walkthroughs
Detailed explanations of project architecture, technologies, configurations, testing, troubleshooting, and outcomes.
Technical Articles and Insights
Cybersecurity, identity, cloud and enterprise IT insights
Explore technical articles, project notes, learning summaries, implementation guides, troubleshooting lessons, and professional insights based on my experience and hands-on technology projects.
Knowledge Sharing
Documenting technical learning and practical experience
This blog is designed to share technical lessons, project workflows, troubleshooting methods, security concepts, implementation notes, and professional development insights.
Technical Guides
Practical guidance for Active Directory, PowerShell, Splunk, Microsoft security, vulnerability management, and enterprise IT.
Professional Development
Lessons from certifications, technical support, cybersecurity projects, interviews, career planning, and continuous learning.
Featured Content
Articles and technical topics
These article previews represent the types of content included in the blog. Individual article pages can be added as the blog grows.
Understanding the Joiner, Mover and Leaver identity lifecycle
Learn how organizations manage identity creation, access changes, role updates, approvals, deprovisioning, audit evidence, and access governance throughout the employee lifecycle.
Explore the related IAM projectRoles, permissions and entitlements in IAM
Explore the differences between business roles, IT roles, permissions, entitlements, groups, access packages, least privilege, and segregation of duties.
Explore IAM learning resourcesBuilding security visibility with Splunk and Sysmon
Review how endpoint telemetry, Windows event logs, Splunk Universal Forwarder, dashboards, searches, and detections support SOC monitoring and investigations.
Explore the SOC projectImportant Windows security events for IAM and SOC monitoring
Learn how authentication, account creation, group membership, account lockout, privileged access, process creation, and service events support monitoring and auditing.
Explore threat-detection resourcesFrom vulnerability scan to remediation plan
Understand host discovery, credentialed scanning, finding validation, risk prioritization, remediation planning, reporting, and verification.
Explore vulnerability projectsDesigning reliable PowerShell automation workflows
Explore input validation, structured CSV files, audit logging, duplicate handling, error management, reporting, and repeatable administrative processes.
Explore automation projectsWhy organizations should use Windows LAPS
Learn how Windows LAPS reduces the risk of shared local administrator passwords by securely rotating and storing unique credentials for managed devices.
View related infrastructure projectsConnecting Azure administration with identity security
Explore how Azure resources, Microsoft Entra ID, Conditional Access, governance, monitoring, identity roles, and cloud administration work together.
View cloud certificationsA structured method for enterprise troubleshooting
Learn how to gather information, reproduce an issue, verify scope, test causes, document actions, communicate clearly, and escalate effectively.
View the technical support resumeArticle Categories
Topics covered by the blog
Blog content is organized around the technology areas represented throughout my professional portfolio.
Identity
Identity and Access Management
Identity lifecycle, RBAC, authentication, governance, privileged access, Active Directory, Microsoft Entra ID, and SailPoint concepts.
- Joiner, mover and leaver workflows
- Roles and entitlements
- Least privilege
- Access reviews
- Identity governance
Detection
Security Operations
Splunk, Sysmon, event analysis, threat detection, incident investigation, MITRE ATT&CK, and security monitoring.
- SIEM searches
- Security dashboards
- Windows event analysis
- Detection engineering
- Incident response
Risk
Vulnerability Management
Vulnerability scanning, risk prioritization, remediation planning, credentialed assessments, finding validation, and reporting.
- Nessus
- Credentialed scanning
- Risk analysis
- Remediation
- Verification
Microsoft
Microsoft Security and Cloud
Azure, Microsoft Entra ID, Intune, Defender, Sentinel, Microsoft 365, Conditional Access, and cloud governance.
- Azure administration
- Microsoft identity
- Endpoint management
- Defender technologies
- Microsoft Sentinel
Infrastructure
Systems Administration
Windows Server, Active Directory, Group Policy, file services, networking, Linux, endpoints, and enterprise infrastructure.
- Active Directory
- Group Policy
- File services
- Windows LAPS
- Networking
Automation
PowerShell and Workflow Automation
PowerShell scripting, CSV processing, identity automation, asset tracking, audit logging, validation, and operational reporting.
- PowerShell
- CSV workflows
- Automation design
- Audit logging
- Error handling
Content Development
Building the blog alongside my technical portfolio
The blog will continue to grow as I complete new projects, expand existing labs, document troubleshooting experiences, and study additional technologies.
Future articles may include detailed PowerShell walkthroughs, IAM procedures, Splunk searches, security event explanations, Microsoft cloud guides, vulnerability-management workflows, and certification study notes.
Each article should focus on clear explanations, practical examples, security considerations, and the business value of the technology being discussed.
Explore More
Review the projects behind the technical topics
Explore my hands-on portfolio to see practical implementations of IAM, security operations, vulnerability management, Microsoft technologies, infrastructure, and automation.