"Winston" – Malware Analysis & Threat Investigation Toolkit

Description: A Python-based toolkit designed to support SOC analysts with streamlined malware analysis and domain/IP investigation workflows.

• Integrations: Built-in support for VirusTotal API, WHOIS lookup, passive DNS resolution, and MalwareBazaar.
• CLI Tooling: Lightweight and fast — ideal for incident response environments.
• Ongoing Development: Currently adding support for Hybrid Analysis and improving enrichment modules.
• Technologies: Python, APIs (VT, WHOIS, MalwareBazaar), CLI, argparse.

🔗 View on GitHub

Home Network Monitoring with ELK Stack

Description: Designed and deployed a full ELK stack to collect, analyze, and visualize security-relevant activity across a home lab environment.

• Elasticsearch: Used for storing and indexing parsed network logs for rapid search and correlation.
• Logstash: Ingested logs from firewalls, servers, and endpoint sensors. Parsed with custom filters to enrich event data.
• Kibana: Built custom dashboards to identify anomalies, detect suspicious behavior, and track performance over time.
• Cloud Hosting: Deployed on Google Cloud Platform (GCP) with alerts tied to GMail and mobile for real-time notifications.
• Technologies: ELK Stack, GCP, Syslog, Beats, Custom Grok Patterns.

Private WoW Server on Raspberry Pi 5

Description: Designed and deployed a self-hosted World of Warcraft emulation server on a Raspberry Pi 5 to explore game server architecture, Linux system administration, and low-resource infrastructure optimization.

• Configured and tuned an open-source emulation core with a MariaDB backend, Lua scripting, and a modular game event system
• Implemented player bot automation to simulate realistic multiplayer activity and test load balancing
• Secured external access via firewall rules and VPN, with remote monitoring via SSH and uptime tools
• Conducted performance tuning on ARM hardware for CPU, memory, and network efficiency under simulated user load
• Used this project to enhance knowledge of game logic, scripting, hosting architecture, and real-time network services