Jeremy Tarkington - Security Portfolio

Two production homelab servers documented as sanitized, published references — a 17 TB storage/services host and a security/OSINT host — generated by a tool that verifies its own output before publishing.

Four independent layers protecting a two-server homelab — encrypted file-level backups with append-only agents, weekly bare-metal system images, parity across the storage array, and off-site replication.

Security field guide for deploying Copilot, Gemini, ChatGPT, and Claude into client tenants — tier differences, admin console walkthroughs, and the permission pre-flight work that prevents AI oversharing incidents.

Deploying a public WordPress site on AWS EC2 with no SSH exposed to the internet, TLS at a reverse proxy, layered application hardening, and append-only off-site backups over a private mesh.

Building a 34-article archive on self-hosted WordPress — bulk content conversion, theme customisation, and what a WordPress export actually carries when you migrate hosts.

Investigation-grade dark web intelligence platform. Multi-layer Tor scraping, IOC extraction, LLM-driven analysis grounded in evidence. Built for operators who need depth without enterprise pricing.

Portable desktop IR toolkit that walks techs through Hunt → Persist → Sweep → Cleanup → Hardening, with case tracking, reports, and audit trails built for real MSP incidents.

On-demand network investigation platform. Drop a lightweight daemon on any network, run a deep scan, and get an evidence-backed map of every device — services, CVEs, classification, and site-to-site subnet discovery.

Self-hosted, operator-driven remote AV scanner for Windows fleets. Trigger silent on-demand scans through your RMM, parse results centrally, and manually quarantine, dismiss, or escalate each finding. Pluggable scanners and RMMs via YAML.

Portable .NET 8 desktop tool that captures a Windows workstation's complete configuration — software, browsers, printers, Wi-Fi, shortcuts — into an encrypted package and restores it on a new machine.

Interactive PowerShell command reference tool with search, category browsing, syntax highlighting, and copy-to-clipboard. Built as a standalone web app for quick command lookup during IR and admin tasks.

Local AI-powered phishing and attachment analyzer for real-world email tickets — drag and drop .eml/.msg to get technical findings, a user-friendly explanation, and clear recommended actions.

Multi-VM AD lab used for Group Policy, auth workflows, and attack/defense practice in a safe, rebuildable environment.

Isolated cyber lab for safely detonating malware, capturing endpoint and network telemetry, and rehearsing analysis workflows with Wazuh, PCAPs, and scripted runbooks.

Custom Wazuh detection rules for identifying malicious PowerShell, persistence mechanisms, lateral movement, and credential theft. Tuned to reduce false positives while catching real threats.

Progressive 12-day CTF with story-driven challenges covering encoding, hash cracking, log analysis, JavaScript deobfuscation, PowerShell malware, web recon, DNS tunneling, SQL injection, and more. Gated progression with flag-based unlocking.

Collection of security automation scripts and IR tools. PowerShell for Windows forensics, Bash for system analysis, and Python for threat hunting and data processing.

Comprehensive collection of PowerShell one-liners for incident response, forensics, AD security, and threat hunting. Downloadable reference guide.

Full CMMC L2 (110 checks), CIS benchmarks, IR playbooks, and report templates. All checklists downloadable for real-world use.

Technical reports and case studies from HackTheBox, TryHackMe, and real-world engagements covering Active Directory exploitation, penetration testing, digital forensics, compliance (CMMC/NIST), and detection engineering.