Featured File
The BlackCat / ALPHV Dossier
A ransomware-as-a-service operation known for Rust-based payloads, aggressive extortion, and identity-focused intrusion paths.
Threat Intelligence • Research • Learning in Public
Intelligence Library
A curated archive of threat briefs, actor profiles, malware case studies, lab notes, career reflections, and cyber awareness resources built through documented practice.
This is where Cyber Grad Chronicles becomes part research archive, part analyst notebook, and part proof-of-work portfolio.
Intelligence Library
Research, reflection, and technical proof.
Browse threat intelligence, hands-on projects, career reflections, and practical cybersecurity resources built through documented learning and professional growth.
Start Here
The story behind Cyber Grad Chronicles.
New to the library? This reflection explains why I started building in public and what this archive is meant to document.
Threat Intelligence
Threat actors, ransomware, and finished intelligence.
Actor profiles, ransomware analysis, malware case studies, and CTI-style intelligence products connected to my research archive.
Additional Files
8 entriesINT-002
The Cl0p File
Ransomware AnalysisA ransomware and extortion group associated with large-scale data theft, file transfer exploitation, and mass victim notification campaigns.
Open →
INT-003
The LockBit Ledger
Ransomware AnalysisA ransomware operation known for its affiliate model, rapid encryption, public leak sites, and widespread enterprise targeting.
Open →
INT-004
The WannaCry Archive
Ransomware AnalysisA global ransomware outbreak that spread rapidly using worm-like behavior and exposed the impact of unpatched systems.
Open →
INT-005
The Ransomware Intelligence Brief
Finished IntelligenceA finished intelligence brief analyzing ransomware trends, operational patterns, defensive implications, and stakeholder-focused recommendations.
Open →
ACT-001
The Scattered Spider Profile
Threat Actor ProfileA cybercriminal actor known for social engineering, SIM swapping, help desk impersonation, and MFA fatigue attacks.
Open →
ACT-002
The Cozy Bear File
Threat Actor ProfileA Russian-linked espionage actor known for stealthy intelligence collection and long-term persistence.
Open →
ACT-003
The Lazarus Dossier
Threat Actor ProfileA North Korean threat actor linked to espionage, destructive malware, and financial theft.
Open →
ACT-004
The Volt Typhoon Watch
Threat Actor ProfileA Chinese state-linked actor associated with living-off-the-land techniques and critical infrastructure targeting.
Open →
Labs & Projects
Hands-on work turned into documented proof.
Lab reflections, Python security tools, CTI environments, and project walkthroughs built to show practical skill development.
Featured File
The CTI Research Workbench
A breakdown of my Wazuh, Sysmon, Kali Linux, Atomic Red Team, MITRE ATT&CK, and Diamond Model lab environment.
Additional Files
2 entriesLAB-001
Notes from the Lab
Lab ReflectionA reflection on building labs, writing security tools, documenting failures, and turning hands-on work into portfolio proof.
Open →
LAB-002
The Python Analyst Toolkit
Project Write-UpHow I built Python tools for phishing analysis, header review, indicator enrichment, and repeatable analyst workflows.
Open →
Career Journal
The human side of building this career.
Reflections on building from Alaska, military-spouse employment barriers, creating proof before opportunity, and documenting an unconventional cybersecurity journey.
Featured File
The Opportunity Finally Came
A reflection on landing my first professional IT role in Fairbanks, moving from portfolio proof into a real technology environment, and realizing that getting the opportunity was only the beginning.
Additional Files
5 entriesCAR-002
Building from the Interior
Career ReflectionWhat I learned building a cybersecurity career from a place many people underestimate, and why proof mattered more than proximity.
Open →
CAR-003
The Portable Career
Career ReflectionHow military life shaped the way I approach cybersecurity, resilience, and building a portable career.
Open →
CAR-004
Proof Before Permission
Career ReflectionWhy I stopped waiting to be chosen and started building visible evidence through labs, projects, research, and public work.
Open →
CAR-005
Qualified, Capable, and Still Waiting
Career ReflectionA personal look at veteran and military-spouse unemployment, underemployment, relocation barriers, and the gap between being qualified and being given an opportunity.
Open →
CAR-006
The Transition Gap
Webinar ReflectionA reflection on military transition, identity, deservingness, and rebuilding an internal sense of legitimacy beyond roles, titles, and external validation.
Open →
Community Awareness
Practical security education for real people.
Plain-language guidance on phishing, passwords, social engineering, military family safety, and community cyber awareness.
Featured File
Securing the Interior
A community-first look at scam patterns, cyber awareness, and digital safety in Interior Alaska.
Additional Files
4 entriesAWR-002
The Alaska Phishing Files
Community Threat BriefReal phishing, smishing, vishing, payroll fraud, and social engineering stories shared by members of my Alaska community.
Open →
AWR-003
The Password Primer
Cyber Awareness GuideA practical breakdown of password reuse, passphrases, credential stuffing, password managers, and account protection.
Open →
AWR-004
The Human Exploit
Cyber Awareness GuideUnderstanding the psychology behind social engineering, why attackers target people first, and practical ways to recognize manipulation.
Open →
AWR-005
The Military Family Safety Brief
Cyber Awareness GuidePractical cybersecurity guidance designed around military life, relocation, deployments, and career transitions.
Open →
Why This Library Exists
Building from Alaska taught me to document the work before the opportunity arrived.
Every file in this library is part of that record: a lab, reflection, research brief, technical project, or resource created while building my path into technology and cybersecurity.