Hey, I amLM Stephen Ortiz
|
I’m a student at San Beda College Alabang pointed at SOC work. I hold Cisco CCST Cybersecurity and Microsoft SC-900. Most of what I know I learned by building: I security-reviewed a self-hosted agent dashboard, found a path-traversal bug, and patched it in two places, then wrote the whole thing up.
Projects
Path Traversal in a Self-Hosted Agent Dashboard
Security review of a mission-control dashboard: found an arbitrary file-write vulnerability reachable through the approval-free path, verified it with a working payload, patched it at two layers, and re-ran the attack to confirm the fix. Threat modeling, PoC verification, secure code review.
Threat-modeling the agent dashboard
Full STRIDE analysis of the same dashboard: trust boundaries, threat enumeration, and mitigations. In progress.
in progress
Home SOC lab: detection rules
Home SIEM lab with log ingestion and custom detection rules, documented end to end. Planned.
planned
Certifications
Verify and check all certificates →
