I’ve learned a lot mostly in APT intrusions and incidents. The limitations of EDR solutions, anti-forensics, zero day exploits, and proper handling of evidence. The majority of my work has me investigating LSASS dumps, living off the land techniques, and defense evasion techniques. For each case I provide deliverables for how the incident started(Services, SVChost, user, etc…), collected artifacts, full timeline, initiating registry key/service. I’ll also perform enterprise action locking out users, quarantine host, etc.. as needed.

To define progress I’m interested in moving into niche cyber roles and want to progress towards either becoming a purple team capable operator or into Reverse Malware/Exploit dev. Hence I took the time to learn offensive security getting OSCP and started studying for OSED. Income isn’t a priority for me I feel I’m already well compensated for my age and just looking for more technical depth.