The code was working well enough that I started thinking about what happened when it wasn’t: a PR with broken Terraform formatting or an unqualified module name would merge without complaint, and I...

I had six nodes now, all SSM-connected, no public IPs, with Ansible running over S3-backed session transport. The inventory.ini looked clean enough, but didn’t stand on its own when needing to term...

Part 1 left me with a working lab, but my control node had a public IP with SSH open to the world. Private keys were being written to disk at boot time and HEREDOC’d into user-data scripts. It work...

The Linux sysadmin role has been quietly absorbing DevOps tooling for the better part of a decade. If you have been doing this long enough, you have watched the job description shift underneath you...

I recently attended BSides NYC 2025, and it was a genuinely productive and engaging experience. This free event continues to be a fantastic resource for the community. The technical depth across al...

This stage marked a brutal break from the clean, declarative ideal of Terraform; it was the world’s worst game of Whack-A-Mole. I quickly abandoned the terraform destroy command, as continuous infr...

First Forays into Terraform Previously, we successfully established the foundational governance perimeter-a secure, multi-account environment governed by IAM Identity Center and a centralized Clou...

Introduction Why build this? After completing my AWS Solutions Architect - Associate (SAA) certification, I needed to transition from theoretical knowledge to demonstrable, practical experience. ...

PS Eclipse simulates a realistic endpoint compromise where an attacker delivers a malicious binary, establishes persistence, and completes their goal of encrypting a device’s files with ransomware....

TryHackMe’s Dead End? presents a forensic challenge that combines memory and disk analysis. Although it’s marked as hard, the real difficulty came from balancing persistence with efficiency. At tim...