Defender Device Tagging
Designed and implemented automated device tagging to focus Microsoft Defender vulnerability views on active endpoints.
Security automation, infrastructure, awareness and application development.
6 projects
Designed and implemented automated device tagging to focus Microsoft Defender vulnerability views on active endpoints.
Built centralised Linux patching workflows with staged updates, reboot handling and per-host reporting.
Implemented Windows event monitoring for Rapid7 and Ivanti services, with detection workflows in Microsoft Defender XDR.
Configured Attack Simulation Training and a new Report button to support phishing exercises and suspicious-email reporting.
Built daily agent and collector health reporting with snapshot comparisons and prioritised HTML and CSV output.
Contributed backend workflows, role-based access and cloud deployment to a university placement brief platform.