Projects

Things I’ve built, fixed, recovered, and moved safely.

These projects show the work behind my experience. I have kept production environments anonymous while preserving the technical problem, my role, the constraints, the validation, and what the result demonstrates.

Flagship work

Detailed case studies

9 projects shown

Production infrastructure

Enterprise VMware-to-Hyper-V migration

Moved production workloads to Hyper-V while preserving identity, networking, application function, source-data safety, and a recovery path.

Evidence: Validated isolated boot, storage, identity, networking, and applications

Read the case study →

Personal engineering lab

Local AI agent platform

Built a private model-serving and agent environment with authenticated APIs, task routing, controlled access, and repeatable performance testing.

Evidence: Validated model loading, authenticated API responses, routing, and access boundaries

Read the case study →

In-progress personal lab

Read-only Network Assistant

Designing a least-privilege agent that brings inventory, metrics, alerts, and incident context together for evidence-backed diagnosis and recovery verification.

Preliminary evidence: Architecture documented and initial monitoring health checks passing

Read the preliminary case study →

Security research lab

Network threat monitoring and forensics

Built repeatable workflows that correlate packet, flow, log, honeypot, IDS, and threat-research evidence.

Evidence: Validated findings across more than one evidence source

Read the case study →

Public personal project

Self-hosting and secure delivery for socket23.com

Rebuilt this site around protected changes, immutable images, least-privilege containers, health checks, verification, and rollback.

Evidence: Validated CI, image integrity, runtime controls, rollback, and public delivery

Read the case study →

Microsoft cloud work

Azure Virtual Desktop recovery automation

Deployed and repaired AVD session hosts, then turned the recovery sequence into staged, discoverable, validated automation.

Evidence: Validated registration, agent health, profiles, sessions, and deployment logs

Read the case study →

Data recovery work

Legacy Apple HFS+ recovery

Recovered user data from legacy HFS+ and encrypted sparse images while protecting the authoritative source.

Evidence: Validated repair, mount, decryption, and recovered file access

Read the case study →

Networking and security work

Network segmentation and firewall troubleshooting

Mapped a flat network and produced a dependency-aware, recoverable VLAN cutover plan alongside firewall troubleshooting.

Evidence: Validated dependencies, management recovery, routing, DNS, and firewall behavior

Read the case study →

Production infrastructure work

Production-safe SAN handling

Created a deliberate discovery workflow that kept unknown source storage offline and read-only until identity was proven.

Evidence: Validated serial identity, offline state, mappings, and target-only initialization

Read the case study →

More work across the stack

A broader project inventory

Infrastructure, storage, and recovery

  • Multi-node Proxmox with ZFS, containers, virtual machines, bridges, scheduled backups, and Proxmox Backup Server
  • VMware-to-Proxmox and VMware-to-Hyper-V conversion testing across boot, disk, network, and virtual hardware
  • Multi-terabyte file server migration planning across storage, SMB, applications, permissions, and domain services
  • ReFS design with 64 KB allocation units for Hyper-V and Veeam workloads
  • Private and routed Hyper-V networks for isolated recovery testing
  • Active Directory health and migration validation with repadmin, dcdiag, netdom, nltest, DNS, and service checks

Networking and security

  • Sophos XGS DNAT, SNAT, firewall policy, DNS forwarding, VPN routing, and service publishing
  • Cloudflare DNS migration, stale-record troubleshooting, proxy behavior, NAT, and public-path validation
  • Tailscale management paths for Linux, Macs, agents, and security appliances
  • Authorized Wi-Fi Pineapple remote lab access and passive collection research
  • IDS, packet, flow, endpoint, and threat-intelligence correlation
  • Exploit research mapped to CVEs, affected services, and likely objectives

Microsoft 365 and Azure

  • Exchange Online mail-flow connectors for printers and scan-to-email
  • Archive provisioning, folder statistics, retention, capacity, and visibility troubleshooting
  • Teams application access policies for an approved HubSpot integration
  • Conditional Access location and grant-control troubleshooting
  • OneAuth, AAD Broker Plugin, OneDrive, Outlook, tenant mapping, and token-state repair
  • Azure PowerShell deployment, discovery, tracking, and recovery workflows

Automation and systems administration

  • Repeatable PowerShell diagnostics for AD, Hyper-V, Exchange Online, Azure, networking, storage, and event logs
  • Structured output and CSV evidence for technical findings
  • Windows bugcheck, kernel-power, memory-dump, thermal-sensor, and device-health analysis
  • Ubuntu, Debian, Proxmox, Docker, systemd, SSH, mounts, packages, repositories, and interfaces
  • Wildcard certificate automation with Dehydrated and Cloudflare DNS-01
  • SSH keys, tunnels, allowlists, and loopback-bound management services

AI systems and agents

  • Local model serving across vLLM, llama.cpp, LM Studio, and Ollama
  • OpenAI-compatible APIs for controlled LAN and Tailscale access
  • OpenClaw and Hermes connected to local and hosted models
  • Task-based routing between general and coding models
  • Memory, context, quantization, and inference-engine comparisons
  • AI-assisted alert triage, attacker correlation, CVE enrichment, and reporting design

Hybrid personal lab

  • Proxmox, Windows Server, Active Directory, Security Onion, Docker, SAN storage, local AI, and segmented zones
  • Production-style validation and recovery rehearsals
  • Repeatable PCAP and network-forensics exercises
  • CAPEv2 malware-analysis planning for Proxmox
  • Security monitoring and private AI integration experiments
  • Public notes that omit credentials, internal addresses, and sensitive operational detail

What the inventory says about me

I am most useful when a problem crosses systems, the starting state is unclear, and the work needs both hands-on execution and a safe recovery path.

See how the experience connects