Blue Team · Threat Hunting · Detection Engineering
Building better detections, investigating suspicious behavior and continuously improving defensive security.
Cybersecurity engineer focused on defensive security, with a strong interest in threat hunting, detection engineering and security research.
I enjoy understanding attacker behavior, turning telemetry into meaningful detections and improving security operations through practical engineering.
23 merged contributions across 19 open-source repositories.
Each PR below links directly to the upstream merge on GitHub.
| Repository | Contribution focus | Merged PRs |
|---|---|---|
| SigmaHQ/pySigma | Detection rule parsing, correlation handling, validation | #545 · #544 · #542 · #541 |
| Velocidex/velociraptor | ATT&CK artifact maintenance, Windows registry artifact fix | #5047 · #5016 |
| SigmaHQ/pySigma-backend-splunk | SPL/SPL2 query precedence | #77 |
| SigmaHQ/pySigma-backend-crowdstrike | Query precedence handling | #25 |
| logpoint/pySigma-backend-logpoint | Pipeline pre-filter handling | #38 |
| wayne-csrs/pySigma-backend-signals | Correlation event rendering | #9 |
| DefectDojo/django-DefectDojo | govulncheck / OSV robustness | #16014 |
| yeti-platform/yeti | Feed-test dependency workflow | #1408 |
| turbot/steampipe-mod-aws-compliance | AWS compliance security-group checks | #978 |
| Kometa-Team/Kometa | Notification failure reporting | #3690 |
| Kometa-Team/Quickstart | CI lint workflow behavior | #1878 |
| ipython/ipykernel | Test dependency documentation | #1573 |
| nornir-automation/nornir | Legacy Jinja2 helper deprecation | #1103 |
| datajuicer/data-juicer | HTML parser compatibility | #1085 |
| arxhr007/Aliens_eye | selectolax parser compatibility | #23 |
| harry0703/MoneyPrinterTurbo | PyAV dependency compatibility | #1582 |
| kaixxx/noScribe | PyAV / faster-whisper compatibility | #367 |
| Softcatala/whisper-ctranslate2 | PyAV package compatibility | #154 |
| benmoran56/esper | Component filter handling | #124 |
View all merged pull requests →
Defensive Security · Detection Engineering · Threat Hunting
