~ whoami
Luke Humberdross
security engineer
I build and break things at the systems level — detection engineering, security automation, and the occasional low-level rabbit hole. Mostly defensive, always curious about how the machine actually works underneath.
01 selected work
all repositories →-
GeoWF PowerShell
Updates Windows Firewall rules from MaxMind's GeoIP databases — block or allow traffic by country, automatically.
-
MicrosoftSentinel KQL
Detection engineering for Defender XDR & Microsoft Sentinel — KQL hunting queries, workbooks, and threat-hunting resources.
-
ipv4-cat Python
A container that replies on every TCP port with your public IP address. The engine behind about.ipv4.cat.
-
Install-Sysmon PowerShell
Installs and keeps Sysmon and its configuration current — endpoint telemetry that stays maintained, not bit-rotted.