https://tyfsadik.org/ 2026-10-22T19:58:11-04:00 MD. Taki Yasir Faraji Sadik https://tyfsadik.org/blog/labs/security/automated-soc-pipeline.html 2026-10-22T19:58:11-04:00

Wazuh + TheHive + MISP SOAR pipeline with MITRE ATT&CK mapping and automated enrichment.

https://tyfsadik.org/blog/labs/security/ad-threat-hunting.html 2026-10-22T19:58:11-04:00

Hunt Kerberoasting, Pass-the-Hash, and Golden Tickets with BloodHound, Sysmon, and Splunk.

https://tyfsadik.org/blog/labs/security/python-ir-automation.html 2026-10-22T19:58:11-04:00

Automate endpoint isolation with Python, yara-python, nftables, and the Proxmox API.

https://tyfsadik.org/blog/labs/security/zero-trust-hybrid-cloud.html 2026-10-22T19:58:11-04:00

NIST SP 800-207 zero trust with SPIFFE/SPIRE, mTLS, and Cilium eBPF microsegmentation.

https://tyfsadik.org/blog/labs/security/vuln-management-automation.html 2026-10-22T19:58:11-04:00

OpenVAS/GVM, Ansible, and Jira automation across the scan-to-patch lifecycle.

https://tyfsadik.org/blog/labs/security/iot-network-recon.html 2026-10-22T19:58:11-04:00

Map IoT attack surface with Nmap NSE, Masscan, Wireshark, and Shodan.

https://tyfsadik.org/blog/labs/cloud-azure/cspm-azure-aws.html 2026-10-22T19:58:11-04:00

Audit AWS and Azure against CIS benchmarks with Prowler, ScoutSuite, and Terraform.

https://tyfsadik.org/blog/labs/security/firewall-configuration.html 2026-10-22T19:58:11-04:00

Configuring iptables and firewalld rules for host-based and network security.

https://tyfsadik.org/blog/labs/containers-kubernetes/docker-fundamentals.html 2026-10-22T19:58:11-04:00

Core Docker concepts: images, containers, volumes, networking, and lifecycle management.

https://tyfsadik.org/work/defence/defence-hardware-program.html 2026-10-22T19:54:50-04:00

Eleven hands-on hardware builds across sky, water, and ground, each mapped to a stated Defence Drone Initiative or Army MINERVA requirement - full BOMs, prices, step-by-step build guides, and bench photos.

https://tyfsadik.org/work/defence/sky-passive-radar-node.html 2026-10-22T19:54:50-04:00

Receive-only passive radar on a KrakenSDR 5-channel coherent SDR: FM/TV broadcast reflections off aircraft, range-Doppler processing with pyAPRiL, scored against an RTL-SDR ADS-B ground-truth receiver.

https://tyfsadik.org/work/defence/water-passive-acoustic-vessel-monitor.html 2026-10-22T19:54:50-04:00

Solar-powered hydrophone node classifying passing vessels from underwater sound, with an RTL-SDR AIS receiver as ground truth and a dock-to-recharge extension.

https://tyfsadik.org/work/defence/ground-seismic-perimeter-mesh.html 2026-10-22T19:54:50-04:00

Solar 915 MHz LoRa mesh of ESP32 nodes with ADXL355 accelerometers and geophones, classifying vehicles vs footsteps vs wind at the edge and reporting signed detections.

https://tyfsadik.org/work/defence/gps-denied-navigation-rover.html 2026-10-22T19:54:50-04:00

ROS 2 rover fusing wheel odometry, BNO085 IMU, and 2D LiDAR with an Extended Kalman Filter; GNSS gets switched off and position drift is measured against a u-blox ground-truth track.

https://tyfsadik.org/work/defence/convoy-robots-degraded-mesh.html 2026-10-22T19:54:50-04:00

Two rovers convoy behind a lead vehicle over a 915 MHz LoRa / Wi-Fi mesh, hold formation through induced link drops, and recover on reconnect - the resupply-convoy DDIL problem at bench scale.

https://tyfsadik.org/work/defence/acoustic-drone-detector.html 2026-10-22T19:54:50-04:00

MEMS microphone array on a Raspberry Pi detecting rotor harmonics, rejecting birds and aircraft, and estimating direction of arrival by beamforming - emits nothing, only detects.

https://tyfsadik.org/work/defence/thermal-sar-drone.html 2026-10-22T19:54:50-04:00

X500-class quadcopter with a FLIR Lepton thermal camera and Hailo AI HAT+ edge detection finding people in snow and brush, pushing georeferenced detections to a live map.

https://tyfsadik.org/work/defence/cold-soak-battery-rig.html 2026-10-22T19:54:50-04:00

Heated, instrumented drone battery bay tested in a lab freezer and real Canadian winter - runtime, voltage sag, and failure modes logged against temperature as a published dataset.

https://tyfsadik.org/work/defence/secure-fleet-updates.html 2026-10-22T19:54:50-04:00

Secure boot, TPM 2.0 measured boot, YubiKey-signed OTA updates, and automatic A/B rollback for the robot fleet - validated in a cold chamber and under power-cut chaos tests.

https://tyfsadik.org/work/defence/airspace-deconfliction-manager.html 2026-10-22T19:54:50-04:00

ESP32 tracker beacons plus ArduPilot SITL simulated drones, dynamic 3D geofences, predicted-conflict alerts, and a human-in-the-loop override for every resolution.

https://tyfsadik.org/work/defence/multi-domain-common-operating-picture.html 2026-10-22T19:54:50-04:00

The fusion layer tying every sensor build together: signed detections over MQTT/Zenoh, store-and-forward through dead links, a Kalman-filter tracker fusing air, water, and ground tracks, and a human making every decision.

https://tyfsadik.org/work/defence/arctic-domain-awareness.html 2026-10-22T19:54:50-04:00

Streaming pipeline fusing open ADS-B aircraft data, AIS ship tracking, and Sentinel-1 radar imagery over Canada's North, flagging dark vessels and route deviations. Relevant to NORAD modernization and Arctic sovereignty.

https://tyfsadik.org/work/defence/ddil-proof-devops.html 2026-10-22T19:54:50-04:00

CI/CD and telemetry that keep working through denied, degraded, intermittent, and limited links: store-and-forward, delta updates, signed artifacts, k3s edge nodes, chaos-tested with tc netem.

https://tyfsadik.org/work/defence/counter-drone-sensor-fusion.html 2026-10-22T19:54:50-04:00

Synthetic radar, RF, acoustic, and camera tracks fused with Kalman filters, confidence scoring, and human-in-the-loop alert triage. Defensive, simulation only.

https://tyfsadik.org/work/defence/decision-black-box.html 2026-10-22T19:54:50-04:00

Tamper-evident audit layer for human-in-the-loop decisions: hash-chained signed append-only log, replay tool, and OPA policy-as-code checks.

https://tyfsadik.org/work/defence/zero-trust-air-gapped-supply-chain.html 2026-10-22T19:54:50-04:00

SBOM, sigstore signing, and reproducible builds moved across a simulated one-way transfer into an offline registry, mapped to Canadian Centre for Cyber Security guidance.

https://tyfsadik.org/work/defence/lentus-drone-mapping.html 2026-10-22T19:54:50-04:00

Simulated drone flights mapping floods and wildfires, edge computer vision detecting affected areas, and a live situational-awareness map, with OR-Tools route optimization.

https://tyfsadik.org/work/infrastructure/homelab-server-room.html 2026-10-22T19:54:50-04:00

The cozy basement server room behind everything on this site: racked desktop and laptop Proxmox hosts, managed switching with VLAN trunking, wireless backhaul, power, and cooling.

https://tyfsadik.org/work/infrastructure/kubernetes-infrastructure.html 2026-10-22T19:54:50-04:00

Production-grade multi-node K8s cluster across 7 machines with VLAN segmentation, Calico CNI, MetalLB, Longhorn storage, and Prometheus + Grafana observability.

https://tyfsadik.org/work/infrastructure/tyf-ai-platform.html 2026-10-22T19:54:50-04:00

Hardened local AI inference: llama.cpp with CUDA, Open WebUI behind an authenticated Caddy proxy, per-model Firejail sandboxing, and GPU passthrough on Proxmox.

https://tyfsadik.org/work/infrastructure/proxmox-zero-trust.html 2026-10-22T19:54:50-04:00

3-node Proxmox HA cluster with Ceph, VLAN segmentation, and zero public ingress via Cloudflare Tunnel with Tailscale fallback and automated ZFS snapshots.

https://tyfsadik.org/work/infrastructure/data-sovereignty-stack.html 2026-10-22T19:54:50-04:00

Self-hosted Nextcloud + Immich on BTRFS external SSDs with multi-user ACL isolation and a 3-2-1 offsite backup pipeline to BorgBase and rsync.net.

https://tyfsadik.org/work/infrastructure/chakor.html 2026-10-22T19:54:50-04:00

Open-source AI workspace you run yourself. Local and cloud models, web search, document chat, model compare, notes, and memory - all private on your hardware.

https://tyfsadik.org/work/infrastructure/private-ai-model.html 2026-10-22T19:54:50-04:00

Self-hosted LLM with integrated web search at ai.tyfsadik.org. Full privacy, no cloud subscriptions.

https://tyfsadik.org/work/infrastructure/proxmox-homelab.html 2026-10-22T19:54:50-04:00

Full virtualization stack for testing servers, VMs, containers, and network configurations.

https://tyfsadik.org/work/infrastructure/self-hosted-dns.html 2026-10-22T19:54:50-04:00

Network-wide ad/tracker blocking with Pi-hole and recursive DNS resolution via Unbound.

https://tyfsadik.org/work/infrastructure/email-server.html 2026-10-22T19:54:50-04:00

Self-hosted SMTP/IMAP with Postfix + Dovecot on custom domain @tyfsadik.org.

https://tyfsadik.org/work/infrastructure/nextcloud-storage.html 2026-10-22T19:54:50-04:00

Private Nextcloud instance replacing Google Drive. Syncs files across all devices.

https://tyfsadik.org/work/infrastructure/photo-server.html 2026-10-22T19:54:50-04:00

Personal photo management with ML face recognition and mobile auto-backup.

https://tyfsadik.org/work/infrastructure/search-engine.html 2026-10-22T19:54:50-04:00

Privacy-respecting search engine aggregating results from multiple sources without tracking.

https://tyfsadik.org/work/infrastructure/wiki-server.html 2026-10-22T19:54:50-04:00

Full Wikipedia mirror accessible to users in countries with restricted internet access.

https://tyfsadik.org/work/infrastructure/arch-linux-remote-desktop.html 2026-10-22T19:54:50-04:00

Full Arch Linux + XFCE remote desktop via WSL2 - no router port forwarding required.

https://tyfsadik.org/work/web-development/homebound-aisha.html 2026-10-22T19:54:50-04:00

Business website for a home-based service provider. Responsive, client-delivered.

https://tyfsadik.org/work/web-development/gta-high-glass.html 2026-10-22T19:54:50-04:00

Website for a glass and glazing company in the Greater Toronto Area.

https://tyfsadik.org/work/web-development/hakimi-fruits.html 2026-10-22T19:54:50-04:00

Online presence for a fruit and produce business with product listings.

https://tyfsadik.org/work/web-development/faiaz-shisha.html 2026-10-22T19:54:50-04:00

Multi-page website for a shisha lounge with flavour menu and booking info.

https://tyfsadik.org/work/web-development/pharmacy-website.html 2026-10-22T19:54:50-04:00

Medical/pharmacy website with product listings and service information.

https://tyfsadik.org/work/web-development/birthday-project.html 2026-10-22T19:54:50-04:00

Interactive birthday celebration page with CSS animations and JavaScript effects.

https://tyfsadik.org/work/web-development/practice-apps.html 2026-10-22T19:54:50-04:00

TypeScript and web development practice projects (app_2_kimi, heda1, heda2).

https://tyfsadik.org/work/games/depot-gato.html 2026-10-22T19:54:50-04:00

2D tower defense game with wave spawning, placement mechanics, and pixel art assets.

https://tyfsadik.org/work/applications/gatearch.html 2026-10-22T19:54:50-04:00

Student portal and admin system with course management and user authentication.

https://tyfsadik.org/work/applications/taxglobe.html 2026-10-22T19:54:50-04:00

Web application for calculating taxes across different jurisdictions with clear breakdowns.

https://tyfsadik.org/work/applications/wonder-learning.html 2026-10-22T19:54:50-04:00

E-learning platform with course listings, video embeds, and educational interface.