01 / ANALYSIS
Network Traffic Analysis with Wireshark
Documented packet investigations covering web traffic, scanning, SMB authentication, Kerberos, and TLS decryption.
View investigationsSECURITY OPERATIONS / INCIDENT RESPONSE
$ whoami
Brandon
Chaney.
I investigate how systems behave, build detections around what matters, and share what I learn along the way.
IT specialist by day · Security investigations and tooling beyond the day job
brandon@lab: ~/portfolio● LIVE
$ ./explore.sh
Loading recent work...
Loading recent work...
brandon@lab:~$ whoami
brandon
PROCESS COMPLETE 00:00:03
// TRANSMISSION LOG
Recently published.
New investigations and projects from my public GitHub.
NETWORK ANALYSIS / SEP 2026Network Traffic Analysis with WiresharkSeven packet investigations, from HTTP recovery to SMB, Kerberos, and TLS.PYTHON / AUG 2026IOC Threat Intelligence AnalyzerBatch enrichment and risk scoring with VirusTotal and AlienVault OTX.DETECTION / AUG 2026Automated SOC PipelineSysmon to Wazuh, Shuffle, VirusTotal, and TheHive in one response workflow.
// FIELD NOTES
Selected projects.
Practical work across investigation, automation, and security testing.
02 / DETECTION
Automated SOC Pipeline
Built an end to end alert flow: Sysmon detection, Wazuh alerts, Shuffle enrichment, and TheHive case creation.
Explore the pipeline03 / TOOLING
IOC Threat Intelligence Analyzer
Created a Python tool to classify indicators, query VirusTotal and OTX, and summarize risk across batches.
View source04 / CLOUD
Azure SOC Honeypot
Collected attack telemetry from an exposed Windows VM and investigated it with Microsoft Sentinel and KQL.
View project05 / RESEARCH
Hack The Box: Connected
Traced a FreePBX SQL injection to code execution, then documented Linux privilege escalation through incron.
Read the writeup// WHO I AM
Behind the work.
A systems perspective on security.
Currently, I'm an IT Specialist at Access Ohio, supporting Microsoft 365, Active Directory, endpoints, and networking across a multi-site organization.
I'm focused on growing into security operations and incident response. And one day, I'd like to become a penetration tester. I have a lot to learn still, but I hope to get there one step at a time.
I've always enjoyed solving unique problems, and learning new technologies. My interest in technology started with game development and design. Outside of work, I go climbing with friends, take long walks with my partner, and unwind by playing visual novels on my PS Vita.
PROFILE / 001
BASEColumbus, Ohio
CURRENTIT Specialist
FOCUSSOC & Incident Response
CREDENTIALCompTIA Security+
// TOOLBOX
Skills & tools.
Tools I use in projects and day to day systems work.
Detection & response
SysmonWazuhSplunkElasticMicrosoft SentinelShuffleTheHive
Investigation & forensics
WiresharkVolatility 3VelociraptorKAPESuricataGhidra
Systems & network
WindowsLinuxActive DirectoryMicrosoft 365DNS / VPNAzure
Code & security testing
PythonPowerShellSQLNmapBurp SuiteGit