The study material behind the case work. Command references I use during investigations, a structured notes base from coursework, and the scripting practice underneath it. All public, all MIT licensed.
Concise command references for the tools I work in, written to be scanned mid-investigation, not read start to finish. Each one opens directly on GitHub. Browse the repository ↗
Search, filtering, statistics, rex, eval, timechart, lookups, tstats, and investigation workflows.
Windows memory analysis, processes, command lines, network artifacts, DLLs, and memory-injection investigation.
volatility3.md ↗ DFIRAccounts, permissions, processes, networking, logs, file hunting, services, and forensic basics.
linux-cli.md ↗ SIEM & SOCWindows administration, enumeration, event logs, networking, processes, and file integrity.
powershell-security.md ↗ ScriptingBash fundamentals, scripting, file operations, log analysis, processes, networking, and debugging.
bash-shell.md ↗ Offensive SecurityMSFConsole, modules, payloads, sessions, Meterpreter, and authorized post-exploitation workflows.
metasploit.md ↗On the offensive-security material: post-exploitation commands are documented for authorized assessments, controlled labs, and defensive validation only. Verify any command against the documentation for your installed version before using it in production.
A structured knowledge base built from university coursework, study material, and practical reference notes, kept organised instead of disappearing when a course ends. Fourteen areas, each a folder you can open directly. Browse the repository ↗
The programming and scripting practice underneath the security work: topic-based labs and short programs written while learning, kept in order rather than polished into finished tools.
Useful if you are learning Python or shell yourself; included here as a record of the groundwork.
Repository ↗