AD Compromise Chain — Pass-the-Hash
LSASS memory dump to Domain Admin via a "ghost session" technique — full lateral movement chain reconstructed through memory forensics. Red Team Leaders Week 5 Technical Precision Award.
Automated Nominal Roll Web Application
Replaced a paper-based record system with a custom web application for 485 FGLEA officers across Lagos Strategic Command — sole developer, full lifecycle.
MutaCryptor Scam Network
OSINT investigation of a multi-stage cryptocurrency and fake-internship fraud network — 18+ IOCs, 3 BTC wallets, formal TI report submitted to the EFCC.
EmergencyEcho Security Assessment
17-finding security review, DPIA, and incident response playbook for a Voice AI health platform — including a critical hardcoded API key escalated pre-launch.
Spear-Phishing & Credential Compromise
M365 account takeover via credential-harvesting phishing — SIEM impossible-travel detection, L1/L2 response, full containment in under an hour.
USB-Borne Malware & RAT Infection
AutoRun dropper to C2 callback in under 20 seconds — EDR behavioral detection, memory forensics, org-wide threat hunt confirming zero lateral spread.
Web Application Penetration Test
Black-box assessment against a public OWASP/PTES-standard target — 2 Critical, 3 High, 1 Medium, 1 Low, full evidence and remediation guidance.
More on GitHub
Full repositories with evidence, IOC exports, and methodology docs for every investigation above.