GalmxCybersecurity Developer & OSINT Researcher

An authorized, Debian-based defensive monitoring environment using Cowrie, Suricata, Fail2Ban, and Docker to observe and analyze SSH brute-force and post-authentication attacker activity.

• Monitored SSH brute-force and post-authentication activity
• Investigated successful weak-credential honeypot sessions
• Analyzed attacker commands, reconnaissance behavior, source networks, and shared tactics
• Correlated related incidents into a broader campaign

Authorized honeypot used strictly for defensive research. Live infrastructure details are not disclosed.

A campaign-level investigation correlating multiple malicious SSH sessions based on shared tactics, commands, reconnaissance behavior, and infrastructure patterns.

• Incident timelines
• Indicators of compromise
• Source-network context
• Tactics and observed behavior

A platform for external attack-surface monitoring, vulnerability tracking, and client-facing security reporting under active development by OSINT Intelligence LLC.

• External attack-surface monitoring
• Vulnerability and exposure tracking
• Security findings
• Tenant and client separation

Platform and client portal are under active development; unfinished features are not represented as deployed.

A command-line OSINT tool for authorized investigations and data collection, built around modular information gathering and structured reporting.

• Modular information gathering
• Structured investigation workflows
• Local evidence storage
• JSON, CSV, and PDF reporting

Built for authorized investigations only; does not imply unauthorized or guaranteed access to private data.

Concept and architecture for a modular network-security analysis tool focused on visibility, findings, and remediation guidance.

• Network visibility
• Security findings
• Plugin-based analysis
• Clear remediation guidance

A SOC-focused application for normalizing and analyzing logs from multiple sources to support investigation workflows.

• Normalize log formats
• Identify suspicious activity
• Support investigation workflows
• Generate readable security findings

Private OpenVPN infrastructure deployed and managed across multiple server locations, covering configuration, hardening, and performance troubleshooting.

• OpenVPN configuration
• Key and client profile management
• NAT and firewall rules
• MTU troubleshooting

Private network infrastructure administration and defensive networking — not an anonymity or abuse service.

A production-oriented Node.js, Express, EJS, MongoDB, Socket.IO, and WebRTC social platform with real-time messaging and calling.

• User authentication, profiles, and feeds
• Private accounts and follow requests
• Multi-image posts and expiring stories with view tracking
• Close Friends visibility and post visibility controls

A Node.js and TypeScript security bot with a web dashboard for anti-nuke, anti-raid, and permission auditing.

• Anti-nuke monitoring
• Automatic lockdown
• Anti-raid controls
• New-account screening

Infrastructure concepts and scripts for detecting abnormal network traffic and delivering real-time attack notifications.

• Traffic rate and packets-per-second monitoring
• Estimated bandwidth reporting
• Attack duration tracking
• Possible vector identification

Planned server and NAS deployments for small-business environments, covering sizing, storage, and continuity planning.

• Workload assessment and server sizing
• Storage planning
• RAID and backup considerations
• Network segmentation

Integrations and workflows connecting Discord bots, webhooks, and email events to infrastructure and security-event reporting.

• Discord bots and webhooks
• Server alerts
• Email-event notifications
• Workflow automation