// page
Projects and tools I’ve built.
A mix of security tooling, detection engineering resources, and side projects. Some are open source, others are internal to my team at Elastic. If something catches your eye, check out the code and feel free to contribute.
LOL-GAIfun
Living Off Legitimate GenAI: a living-off-the-land catalog (LOLBins play) for GenAI tools on developer workstations. Grades, MITRE mapping, static JSON/CSV API, and a lab install path. Continues the work that started as the GenAI Detection Engineering Registry on this site.
lolgai.io
YAML / JS
GenAI Detection Engineering Registry
Earlier interactive reference of GenAI coding tools (process names, config paths, MCP, skills, readiness grades). Superseded by LOL-GAI at lolgai.io; kept here as a historical snapshot.
View Registry
JS
Internal Tooling
Internal to my team in my current role. Tools for GenAI security research and detection enablement, including agentic workflows for investigation support, rule tuning, threat coverage analysis, and report automation.
Private Repository
Python
Detection Rules
Detection Rules is the home for rules used by Elastic Security. This repository is used for the development, maintenance, testing, validation, and release of rules for Elastic Security's Detection Engine.
github.com
Python
August Eatsfun
Nutrition / Allergy Based Application concept.
github.com
JS
Detections as Code
DaC reference guide to apply software development best practices to the creation, management, and deployment of detection rules.
readthedocs.com
Markdown
Rotten Applesfun
Repo to help unify several macOS commands useful to identify insecurities.
github.com
Python
Idealfun
The ideal template to start a go project.
github.com
Golang
WiseYodafun
Simple toy library to obtain wisdom from the wise Master Yoda in the form of quotes.
github.com
Python