Projects
Project samples
Hands-on pieces that show how I think through Trust & Safety and investigations problems — not just what I've done, but how I work through a case.
LE Requester Verification Console
An analyst workspace for verifying whether a law-enforcement requester is who they claim to be — catching a fake persona on a lookalike agency domain, then a harder case: a real but compromised agency account. Pivot-based OSINT, WHOIS/RDAP, ASN attribution, certificate transparency, and a LATAM verification playbook.
Account Recovery: KBV vs. NIST 800-63
Three account-recovery tickets, each worked two ways side by side: an impersonator, an attacker with the owner's hijacked inbox, and the real owner. A common support script built on account questions lets both attackers in and locks the real owner out. A recovery workflow built on NIST SP 800-63-4 stops the attackers and lets the owner back in.