// toolkit

Skills

The platforms, disciplines, and languages I work in day to day.

Security Engineering

Endpoint securityEndpoint hardening & protectionSecurity architectureIncident responseVulnerability management

Endpoint Security

WDAC (XML-level policy authoring)Application controlUSB / storage controlsEDR / XDR — MS Defender for EndpointJamf Protect

Security Operations

Threat huntingMalware investigationAlert triage & validationSOC automation

Detection Engineering

Microsoft SentinelDefender Advanced HuntingCustom KQL detectionsDetection tuning

Enterprise Security Platforms

Netskope SSECloud Access Security Broker (CASB)Secure Web Gateway (SWG)Data Loss Prevention (DLP)Zero TrustMicrosoft IntuneJamf ProScalefusion MDMOSQueryChrome EnterpriseGoogle Workspace

Automation

PowerShellPythonKQLREST APIsAzure CLIAI-assisted engineering (Claude Code)

Cloud & Identity

Microsoft AzureAzure Entra IDAWS