Open-source tools, security cheatsheets, M365 & agentic-AI write-ups, and pentest work — everything built under eusebio@it-sec.
M365 / Entra ID incident-response report builder. Enter incident details, affected users, and timeline — it generates a structured DFIR report with remediation guidance.
Professional pentest report generator with CVSS v3.1 scoring, OWASP + CWE mapping, a remediation table, and table of contents. Two real-world samples included.
57 enterprise security checks across Identity, Exchange, SharePoint, Teams, Power Platform, Defender, Endpoint & Audit — with PowerShell remediation, a radar posture score, and executive PDF export.
Paste a Power Automate flow JSON and scan for hardcoded secrets, risky connectors, HTTP risks, DLP violations, error-handling gaps, and data-exfil patterns.
Audit Copilot Studio agent configurations for overprivileged connections, exposed topics, unvalidated inputs, and missing authentication on custom actions.
Interactive Active Directory attack-path visualisation. Feed it BloodHound JSON and generate a visual chain from low-priv user to Domain Admin with exploitation notes.
Build, simulate, and audit Entra ID Conditional Access policies like an enterprise architect — visual builder, sign-in simulator, gap analysis with 11 expert checks, and executive PDF report.
112 enumeration techniques across 15 categories — Network, SMB, LDAP, DNS, Web, ADCS, Cloud, K8s, OSINT and more — with live variable substitution on every command.
Structured pentest methodology reference — OWASP phases, web/network/AD attack vectors, a CVSS scoring guide, scope definitions, and tool selection per engagement type.
Quick-reference for Power Apps canvas development — formulas, delegation rules, component patterns, data-source connections, and performance best practices.
Developer reference for Power Automate — expressions, formatDateTime, JSON parsing, HTTP patterns, scope/try-catch error handling, approval flows, and connector best practices.
One-stop Copilot Studio reference — topics, entities, OData filters, Adaptive Card JSON, Power Fx deep dive, debugging, autonomous agents, human handoff, and real-world IT/HR/Security blueprints.
Consulting-grade internal penetration-test report covering the full engagement lifecycle: reconnaissance, enumeration, exploitation, post-exploitation, and remediation guidance.
OWASP Top 10-focused web application pentest report covering SQLi, XSS, IDOR, broken authentication, and security-header misconfigurations with full PoC documentation.
Documented walkthroughs of TryHackMe rooms covering enumeration, privilege escalation, Active Directory attacks, and web vulnerabilities with step-by-step methodology notes.
Full breakdown of my eJPT preparation: INE course sections, TryHackMe rooms, tools practiced, and what the exam actually tests.
Real patterns from years of M365 administration — legacy auth, unconstrained guest access, missing DLP, and more. Each with detection, remediation, and incident-response steps.
A practitioner's guide to the Certified LLM Security Professional exam — how all 9 domains connect to real enterprise AI deployments, Copilot Studio agents, and MCP security.
Step-by-step SMB relay attack using Responder and NTLMRelayX, with detection via SMB signing enforcement and Defender for Identity.
End-to-end guide: SharePoint knowledge sources, leave-request topics, Power Automate approval flows, Entra ID authentication, and Microsoft Teams deployment in a production-ready HR agent.
From an admin who has built and reviewed CA policies in enterprise tenants — common bypass conditions including the 2026 OIDC enforcement gap, exclusion-group abuse, and how to build policies that hold under pressure.
Delivered 100+ Power Apps and 200+ Power Automate flows across head office and multi-site Eastern and Western Canada operations — eliminating hundreds of hours of manual work with security-first, DLP-aware design.
Managed Copilot for M365 licensing, security controls, and user enablement. Built Copilot Studio agents for internal workflow automation, AI-assisted report generation, and business-chat automation at enterprise scale.
Supported full migration of ACML systems and users into CBRE's environment during acquisition — Azure AD + on-prem AD identity, RBAC, mailbox migrations, and Power Platform continuity post-cutover.