Projects & Tools
Things I've built: tools, scripts, and side projects.
Heuristic phishing-detection engine shipped as two independently maintained implementations, TypeScript and Python, guaranteed to agree on every finding: URL/domain typosquat and homograph checks, SPF/DKIM/DMARC-aware header analysis, Received-chain spoofing checks, IOC defang/refang, MITRE ATT&CK mapping, Sigma rule and KQL query generation, and parsing for raw .eml/pasted messages, Outlook .msg files, and embedded QR codes. No network calls, no external API keys. Everything runs locally on data you already have.
An in-house tool that analyzes suspicious emails, pasted or uploaded as an .eml/.msg/.txt file, and returns a scored verdict, what to do about it, and detection artifacts you can take back to a SIEM.
This site itself: a minimal Express/Pug site with a build-time content pipeline, real tests, and the infrastructure to back it up.