LogLens
C++20 defensive log analysis CLI for Linux auth evidence, with parser coverage telemetry and deterministic report output.
About
Reviewable systems, telemetry, and defensive engineering artifacts.
I build small public repositories that are intentionally narrow, reproducible, and easy to inspect. The main arc is systems foundations into telemetry and monitoring, then into defensive security tooling and public-safe security writing.
Selected Projects
telemetry-lab
Deterministic telemetry and detection demos for windowing, dedup, bounded AI-assisted case drafting, and config-change investigation.
repo-sentinel-lite
Deterministic repository hygiene and lightweight secret-adjacent scanning with baselines and pre-commit integration.
scientific-computing-toolkit
Flagship-led scientific and supply-chain review infrastructure centered on the deterministic `sbom-diff-and-risk` tool.
systems-foundations
Linux auth and networking-state mini-labs that turn low-level evidence into reviewable normalized artifacts.
sec-writeups-public
A public-safe pattern library: 8 stable security patterns extracted from 10 source notes, with maturity and provenance enforced in CI.
Reusable Security Patterns
Parser uncertainty
Keep unsupported input visible instead of treating parser gaps as negative evidence.
Authentication burst triage
Bound authentication clusters without turning repeated failures into a compromise verdict.
Multi-user probing
Distinguish username spread from ordinary repeated failure by one account.
Alert deduplication
Collapse duplicate alerts while preserving representative evidence and escalation signals.
Bounded correlation
Require a reproducible join key, event sequence, and time window before claiming a chain.
Repository baseline governance
Review suppression drift as security-adjacent code rather than invisible maintenance.
SBOM policy warning
Explain why a dependency diff warned without inventing a package-safety verdict.
Human verification boundary
Keep AI-assisted drafts separate from evidence-backed, human-owned findings.
Writing
telemetry-lab / Design Notes
Why the project is intentionally a small telemetry asset instead of a platform, and how the pipeline is structured.
systems-foundations / Text Processing Pipelines
A systems note on turning shell and text-processing work into reusable, inspectable workflows.
sec-writeups-public / SOC Fundamentals
A public-safe blue-team note on SOC roles, triage flow, alert meaning, and why context decides whether a detection matters.
Contact