A "Swiss Army Knife" command-line interface (CLI) for easy human and non-human interaction with @cyberark suite of products.

A modern, extensible framework for defining and enforcing security policies across your digital infrastructure.

Authomize open solutions for partners and customers

Open-source Active Directory & Entra ID security auditor. 419+ checks, ADCS ESC1-ESC11, attack paths. 6.2× faster than PingCastle. Apache 2.0.

Small scripts and targeted tools created by Trimarc staff to help solve common issues in Identity Security.

A PowerShell tool to identify and audit user-consented applications in Microsoft Entra ID (Azure AD), with a focus on uncovering "Shadow IT" and security risks.

senhasegura Identity Threat Labs is a premier threat intelligence center specializing in predictive analysis of identity-focused attack vectors. Using reverse engineering, malware analysis, and threat intelligence, our lab identifies emerging threats and provides actionable reports to help organizations strengthen defenses and mitigate risks.

Cloud Identity Security Engineering — Go-based security research and tooling for AWS IAM attack-path analysis, privilege escalation detection, and CloudTrail-based detection engineering.

Afterlogin: The Hunt × Helper Patrol — a cinematic identity & data-governance training game powered by real gpt-4o tool-calling agents + Foundry IQ grounding. Microsoft Agents League · Creative Apps.

A curated collection of IAM and PAM resources, insights, best practices, and implementation guidance based on my hands-on experience.

Zero Standing Privilege Gateway for Azure - JIT access for AI agents, automation, and service principals

A cross‑tenant migration framework for Secret Server–compatible PAM environments. It automates the transfer of Secrets, Folders, Roles, Permissions, and metadata using schema‑aware mapping, integrity checks, and auditable workflows to deliver reliable, low‑risk enterprise migrations.

ITDR (Identity Threat Detection and Response) platform with ML-powered anomaly detection, UEBA, risk scoring, and role mining

A portfolio of completed rooms, challenges, and CTFs from TryHackMe.com, showcasing hands-on experience with real-world cybersecurity scenarios — from hacking machines to investigating attacks. This collection highlights my practical skills across diverse technologies, reflecting my growth and learning through various cybersecurity learning paths.

Security tools for purple team, AI security, and M365/GWS. Authorized use only.

PowerShell automation scripts for Microsoft Entra ID auditing using Microsoft Graph and Azure CLI authentication.

Tool for detecting and analyzing identity sprawl and privilege abuse in hybrid (on-prem and cloud) environments.

Risk-based identity protection using Microsoft Entra ID Protection — Conditional Access policies for MFA baseline, user risk, and sign-in risk, using a report-only-to-enforced rollout methodology.

post-exploitation tool for computer object takeover via Resource-Based Constrained Delegation modify msDS-AllowedToActOnBehalfOfOtherIdentity attributes to abuse Kerberos delegation and escalate privileges in Active Directory.

Zero Trust security framework implementation guides, NIST 800-207 mappings, and architecture patterns for enterprise environments