PSObfuscate - Build, encode, wrap, and deliver PowerShell payloads
·886 words·5 mins
Building PSObfuscate: A PowerShell Payload Builder for Operators Who Value Their Time
Projects
A collection of my cybersecurity projects, tools, and labs.
When Antivirus Fails: Detecting C2 Activity with Wazuh and Security Onion
·1186 words·6 mins
In this project, I executed a custom, low profile mTLS C2 beacon on a fully patched Windows 11 endpoint that did not trigger Windows Defender. I then examined how this activity appeared across endpoint telemetry in Wazuh and network telemetry in Security Onion.
Assumed Breach SOC Lab: Internal RDP Brute Force, Active Directory Recon, and Wazuh Detection
·667 words·4 mins
In this project, I executed a custom, low profile mTLS C2 beacon on a fully patched Windows 11 endpoint that did not trigger Windows Defender. I then examined how this activity appeared across endpoint telemetry in Wazuh and network telemetry in Security Onion.