case 2026-1025 · status open · severity informational

I spend my days reading the alerts other people are afraid to open.

I'm a cybersecurity analyst in Ontario working incident response and threat detection — account takeovers, phishing, malware, the odd ransomware scare. I write about the patterns so fewer people have to learn them the hard way.

credentials SANS GSECGIAC GFACTBlue Team Level 1CompTIA Security+PG Cert, Information Security Management
09:14

What I help with

Most of the damage I see at work could have been stopped by three or four settings. That's usually where I start.

  • M365-review Microsoft 365 security review — sign-ins, MFA, admin accounts, forwarding rules, checked and turned into a short list of fixes.
  • SMB-baseline Small business security baseline — passwords, MFA, backups, devices and email, set up and explained so your team actually follows it.
  • second-look "Something looks wrong" review — a strange login, a supplier's new bank details, a hacked account. A second opinion from someone who triages these daily.
  • site-harden Website security — WordPress hardening, updates, backups and monitoring, so your site isn't the way in.

Not sure which one you need? Tell me what's worrying you and I'll say plainly if it's a quick fix or real work.

11:30

Case history

I came to security from cloud and DevOps engineering, so I think about how systems get built as well as how they get broken.

nov 2024 – present

Cybersecurity Analyst — ORION

Incident triage and KQL investigations in Microsoft Sentinel: account compromises, ransomware detections, phishing and brute force. Detection tuning and automations that replaced manual daily reporting.

apr 2025 – present

Cybersecurity Consultant — Catalyst Cyber Clinic, Rogers Cybersecure Catalyst

Pro bono security assessments for non-profits: client interviews, findings on MFA, endpoint protection and email compromise, with recommendations they can actually act on.

feb 2023 – sep 2025

Cybersecurity Analyst, freelance — Prestigious Techies

Forensic investigations across memory, network and disk artifacts, and incident response playbooks for phishing and malware.

aug 2023 – present, volunteer

Security Awareness Trainer — Ghanaian Canadian Association of Ontario

Community sessions on phishing, fraud and password safety.

B.Sc. Computer Science · Post-graduate certificate in Information Security Management, Fanshawe College · Rogers Cybersecure Catalyst coursework.

14:05
16:40

Get the short version by email

When a scam or attack is hitting Canadians or small businesses, you'll get what it is and what to do. No spam, unsubscribe anytime.