Build
Projects
Tools operators can use, writing that clarifies the craft, and the systems I test ideas in.
A lot of this ships through Scott’s Lab. The notes below cover what each project is for — use the sidebar to open the live tools, posts, and repos.
EventID-Scraper Link to heading
Faster Windows security event lookups during detection engineering. Aggregates Event ID context from authoritative sources so analysts spend less time tab-hopping and more time deciding.
Stack: Python · web scraping · security research
Use when: Log analysis, detection rule authoring, threat hunting
IR-Logger Link to heading
A CLI for incident responders who need organized notes while the investigation is still moving. Logs observations, actions, and findings straight into markdown so the timeline survives the handoff.
Stack: Python · Markdown · CLI
Use when: Active IR, forensic note-taking, investigation tracking
Vulnerability reporting framework Link to heading
Internal Python framework built at the City of Carmel. It ingested vulnerability exports across 40+ network segments, mapped findings to MITRE ATT&CK, and produced dual-format reports — cutting monthly analysis from hours to under 30 seconds.
Stack: Python · MITRE ATT&CK · reporting pipelines
Outcome: Faster triage, clearer leadership briefs, less spreadsheet archaeology
AI agent & MCP automation Link to heading
Hands-on work running AI coding agents and MCP-integrated automation platforms — scheduled agent jobs, sandboxed execution, and credential-scoped workflows. The practical write-up lives in the Lab post on hacking with AI.