About

MDR team lead with nearly 5 years of experience in threat investigation, threat hunting, and detection validation across endpoint, identity, and email security environments. Day to day, I analyze suspicious process execution, persistence mechanisms, and other common attacker behaviors, determining whether activity is malicious, benign, or requires additional monitoring, and remediating it hands-on when it's malicious.

A major part of my work involves turning technical findings into clear, actionable documentation. I regularly create investigation summaries, escalation notes, false positive closures, and remediation guidance that bridge the gap between security operations and client communication.

I'm especially interested in Windows-based investigations, malware behavior, persistence techniques, on-disk forensics, and practical analyst tradecraft. I also value building repeatable investigation workflows, documenting useful commands, and improving how analysts communicate technical findings.