Popular repositories Loading

1. DFIR-Portfolio DFIR-Portfolio Public

   A collection of my Digital Forensics and Incident Response (DFIR) case investigations, including TryHackMe and real-world styled incident analysis. Each case includes methodology, findings, timelin…

2. RDPTimeline RDPTimeline Public

   RDPTimeline is a DFIR tool that reconstructs RDP sessions from Windows Event Logs using timeline analysis, then correlates and flags suspicious activity occurring within and around those sessions u…

   Python

3. IdleCrypt IdleCrypt Public

   IdleCrypt is a macOS-based security tool that automatically encrypts the contents of a sensitive folder when the system is left unattended for a specified period of time.

   Python

4. EE-Passcheck EE-Passcheck Public

   This is an applied security research tool that demonstrates structure based password entropy estimation inspired by Expectation Entropy, with attacker-centric interpretation.

   C++

5. QUICkly QUICkly Public

   A forensic tool that analyses QUIC Initial packets from PCAP files to extract connection-level behavioural fingerprints and apply deterministic logic rules and YARA-style signatures