Digital Forensics
SQLite / WAL / SHM Examination
Database artifacts, write-ahead logs, record correlation, and timestamp normalization.
SQLite · SQL · Artifact correlation
Evidence before assumption.
A working collection of digital forensic methods, network analysis, and security-focused technical projects. Each investigation begins with observable evidence and ends with clearly stated limits.
Explore case studiesTHE WORK / 001—006
Projects are presented as methodologies and research areas. Findings and completion status are not overstated; supporting material will be added as it is verified and prepared for public release.
Digital Forensics
Database artifacts, write-ahead logs, record correlation, and timestamp normalization.
SQLite · SQL · Artifact correlation
Digital Forensics
A methodology-focused exploration of mobile artifacts, acquisition boundaries, and interpretation.
iOS · Logical artifacts · Documentation
Digital Forensics
Repeatable workflows for inventorying artifacts, comparing records, normalizing timestamps, and creating hash manifests.
Python · SQL · SHA-256
Network Security
TCP stream examination, protocol relationships, endpoint attribution, and evidence-led traffic timelines.
Wireshark · TCP/IP · TLS · DNS
Network Security
An evolving lab for network observation and controlled defensive experiments using Raspberry Pi and Mac systems.
Raspberry Pi · macOS · Networking
Technical Portfolio
Attack-surface reduction, static publishing decisions, and practical risk review for a personal web presence.
Next.js · Security review · Risk
THE APPROACH
Identify the artifact, source, and acquisition context.
Compare records, timestamps, and independent indicators.
Test alternative explanations and document limitations.
Present reproducible methods without overstating conclusions.
CONTACT / COLLABORATION