A curated index of production-ready builds, hands-on network topologies, sysadmin deployments, and security configurations.
Enterprise routing and switching environment featuring OSPF multi-area configuration, inter-VLAN routing (RoAS), Port Security, and NAT/PAT outbound rules.
Isolated sandbox for threat detection, log ingestion via Wazuh SIEM, brute-force simulation, and vulnerability scanning with Nmap and OpenVAS.
High-availability branch topology implementing HSRP failover, EtherChannel link aggregation, BGP WAN connectivity, and core/distribution tiering.
End-to-end Windows Server environment setup including AD DS domain services, Group Policy Object (GPO) hardening, DNS forwarders, and failover DHCP.
Production Ubuntu/RHEL deployment with SSH key authentication, UFW/iptables firewall policies, Nginx reverse proxy, and systemd service management.
Perimeter defense deployment using Extended ACLs, pfSense firewall policies, and Site-to-Site IPSec VPN tunnels for secure cross-office traffic.
Deep packet inspection with Wireshark and TShark to trace exfiltration, reconstruct TCP streams, and identify rogue C2 beaconing activity.
Structured fault isolation methodologies for hardware bottlenecks, DNS resolution delays, interface duplex mismatches, and ARP table anomalies.
