Case studies
How the tools were built
Deep dives on the projects: the problem each one solves, the design decisions, and what I'd do differently. Code is in the repositories; this is the reasoning behind it.
endpointwatch: endpoint monitoring that explains itself
Processes, connections, and persistence on Windows, enriched with VirusTotal and AbuseIPDB, and turned into plain-English LLM alerts. The maintained alternative in a field of abandoned tools.
rackpulse: modern health monitoring for 2016-era servers
A testable decision core behind a thin hardware layer, backporting modern host and hardware health monitoring onto legacy Dell PowerEdge gear running ESXi 6.7.