What I am doing this month.
A now page: the short, current answer to "what are you working on?", kept honest by being dated.
Building
- Rolling Wazuh agents across the Biira Bank lab now that SIEM01 is back on dedicated hardware, then first custom detections against DC01 telemetry.
- Rebuilding the Ansible controller (ANS01) and the monitoring host (MON01) as Proxmox guests.
- Hardening the last three pfSense rulesets (BlueTeam, DevOps, Monitoring) to default-deny, each rule justified and mapped.
- Phase 5.2 of the IAM lab: adaptive, risk-based MFA in Okta.
- Configuring HashiCorp Vault on the DevOps VLAN, following the Vault notes.
Studying
- AZ-104 Azure Administrator: prep course at 93%, exam next.
- SC-200 Security Operations Analyst: prep course at 89%.
- Practical SOC Analyst (TCM Security): SOC 101 at 40%, working through the investigation labs.
Thinking about
- Treating an AI agent as a non-human identity: an AD service account, short-lived Vault credentials, firewall-scoped reach and a Wazuh audit trail, built in the lab.
- What "evidence" means for a homelab: naming, registers and change logs that an auditor could follow, not just screenshots.
Talking about
- Hybrid identity design, homelab builds, and the certification path. Say hello.