I'm a security researcher and developer who likes building tools that operators can actually use. Most of my work sits around adversary emulation, detection engineering, macOS security, and cyber deception.
I maintain and contribute to projects such as Atomic Red Team, LOAS, LOLPaths, ORKL, and Atomic Red Team MCP. I also helped start Cyber Deception Village, where the focus is cyber deception research, talks, and more.
- LOTTunnels/LOTTunnels.github.io (1 day ago)
- infosecB/LOOBins - Living Off the Orchard: macOS Binaries (LOOBins) is designed to provide detailed information on various built-in "living off the land" macOS binaries and how they can be used by threat actors for malicious purposes. (2 days ago)
- Living Off the Orchard: AppleScript - Offensive security testing framework for macOS that provides MITRE ATT&CK-mapped atomic tests using AppleScript and JXA techniques across multiple execution methods. (Nov 27, 2025)
- Execution Methods - Learn how to execute LOAS tests using various methods and understand how each creates different detection telemetry. (Nov 27, 2025)
- macOS Security Primer - Understanding Living Off the Orchard attacks and why AppleScript/JXA techniques require specialized testing frameworks for macOS security. (Nov 27, 2025)
- Claude becomes C2 - Breaking Everything, Everywhere, All at Once (Nov 4, 2025)
- Atomic Red Team MCP - Use Atomic Red Team MCP server to create, query, and execute atomics from Atomic Red Team (Oct 31, 2025)
- ATT&CKCON 5 - Bridging the Gap: Enhancing Detection Coverage with Atomic Red Team, Sigma, and MITRE ATT&CK
- Atomic Red Team Webinar - Simplify security testing with Docker, Windows Sandbox, and Atomic Red Team
- Blockchain Goes to College
- Breaking into infosec and learning new skills with Atomic Red Team - YouTube Video
- T9Hacks 2020 winners announced
