things that I've built for fun, entities, or to graduate.
AWS event-driven SIEM with DNS threat intel as the differentiator. Worker resolver query logs feed a Lambda scorer; Step Functions persist and alert, and high-severity sources land in a WAFv2 blocklist — no agents on the workers. Terraform end-to-end.
Windows Forms GUI for administering Linux servers through Ansible on WSL — point-and-click server automation for Windows-based admins.
My employer needed 100% accurate CVE counts for a list of CPEs. Crafts an NVD query URL for each CPE and scrapes the CVE count, emitting the results as JSON.