A beginner-friendly walkthrough of Amazon GuardDuty using its built-in sample findings generator - see every major finding category and severity level without attacking anything or spending a cent.
Assembling all Week 3 security tools into a single GitHub Actions pipeline - Semgrep, Snyk, Checkov, tfsec, Trivy, and ZAP running as sequential security gates on every PR and push.
A full walkthrough of AWS CloudFormation and CDK - template structure, parameters, outputs, intrinsic functions, change sets, nested stacks, and CDK constructs
A full walkthrough of OWASP ZAP for dynamic application security testing - spidering, active scanning, API testing, and running ZAP in CI against a staging environment.
A full offensive security walkthrough against a MERN stack web application - from initial recon all the way through exploitation. Methodology I applied against my own live app.
A full walkthrough of Checkov and tfsec - scanning Terraform, CloudFormation, and Kubernetes manifests for security misconfigurations before they reach production.
A full walkthrough of AWS DynamoDB - tables, partition and sort keys, read/write capacity, GSIs, DynamoDB Streams, DAX, TTL, transactions, and design patterns
A full walkthrough of Software Composition Analysis using Snyk and GitHub Dependabot - tracking vulnerable dependencies, generating SBOMs, and automating dependency updates.
Technical walkthrough of TryHackMe Cloud-based IaC covering Terraform architecture and HCL configuration, AWS CloudFormation templates and stacks, Terraform vs CloudFormation trade-offs, and secure IaC best practices for cloud deployments.
Technical walkthrough of TryHackMe On-Premises IaC covering on-premises vs cloud trade-offs, Vagrant provider orchestration, Ansible playbooks and Jinja2 templates, IaC security pitfalls, and full exploitation of an on-prem pipeline.