Jeremy Tarkington - Security Portfolio

Multi-VM AD lab used for Group Policy, auth workflows, and attack/defense practice in a safe, rebuildable environment.

Isolated cyber lab for safely detonating malware, capturing endpoint and network telemetry, and rehearsing analysis workflows with Wazuh, PCAPs, and scripted runbooks.

Progressive 12-day CTF with story-driven challenges covering encoding, hash cracking, log analysis, JavaScript deobfuscation, PowerShell malware, web recon, DNS tunneling, SQL injection, and more. Gated progression with flag-based unlocking.

Portable desktop IR toolkit that walks techs through Hunt → Persist → Sweep → Cleanup → Hardening, with case tracking, reports, and audit trails built for real MSP incidents.

Local AI-powered phishing and attachment analyzer for real-world email tickets — drag and drop .eml/.msg to get technical findings, a user-friendly explanation, and clear recommended actions.

Custom Wazuh detection rules for identifying malicious PowerShell, persistence mechanisms, lateral movement, and credential theft. Tuned to reduce false positives while catching real threats.

Comprehensive collection of PowerShell one-liners for incident response, forensics, AD security, and threat hunting. Downloadable reference guide.

Full CMMC L2 (110 checks), CIS benchmarks, IR playbooks, and report templates. All checklists downloadable for real-world use.

Collection of security automation scripts and IR tools. PowerShell for Windows forensics, Bash for system analysis, and Python for threat hunting and data processing.

Technical reports and case studies from HackTheBox, TryHackMe, and real-world engagements covering Active Directory exploitation, penetration testing, digital forensics, compliance (CMMC/NIST), and detection engineering.