SOC Tier 1 investigation portfolio with Microsoft Defender/XDR, Sentinel, phishing, Windows/network evidence, KQL, Sigma, severity reassessment and escalation/disposition.

TLS and cryptography lab evidence for Security+ study: certificates, TLS 1.3 handshakes, ChaCha20 session analysis, and validation notes.

Native FreeBSD PF segmentation with Suricata/Wazuh detection evidence, synthetic test traffic and SHA-256 validated artifacts.

Reproducible TShark network-analysis lab with synthetic PCAP, retained outputs, timeline reconstruction and SHA-256 evidence.

First-role SOC / Junior Cybersecurity portfolio: laboratory evidence, detection tests, investigation reasoning and supporting security engineering.

Repeatable Kali Linux workstation baseline with dated system, network, firewall and storage evidence.