class Alphonse:
name = "Alphonse Joseph"
alias = "nyxsentinel"
location = "Sweden 🇸🇪"
degree = "MSc Cybersecurity — University West"
thesis = "Comparative Evaluation of Open-Source SOAR Tools (2026)"
lab = "Raspberry Pi 5 · Enterprise Security Stack · Running Live"
philosophy = "You can't defend what you don't understand."
currently = [
"Writing MSc thesis benchmarking Shuffle vs Wazuh/Cortex/TheHive",
"Generating real attack data via T-Pot honeypot + FortiGate 50G NGFW",
"Building automated SOAR playbooks + Python metrics pipeline",
]
looking_for = ["Penetration Testing", "Threat Intelligence", "SOC / Security Research"]Comparative Evaluation of Open-Source SOAR Tools
Benchmarking Shuffle vs Wazuh/Cortex/TheHive, integrated with a FortiGate 50G NGFW and T-Pot honeypot to capture real attacker behaviour. Building automated playbooks and a Python metrics pipeline — the first empirical benchmark of open-source SOAR tools.
Offensive Security
Defense & Network
Monitoring & SIEM
AI / ML for Security
Infrastructure
| Project | Description | Stack | Type |
|---|---|---|---|
| 🖧 Pi 5 Security Operations Lab | Enterprise-grade security stack on Raspberry Pi 5. DNS filtering, VPN, firewall, SSH honeypot, SIEM, live dashboards. Running live 24/7. | Shell · Python · Docker | 🔵 Defensive |
| 🤖 ML Security Classifier | Network intrusion detection pipeline. Decision Tree, Random Forest, KNN and SVM with comparative analysis and feature importance visualization. | Python · scikit-learn | 🟣 ML/AI |
| 📡 Rogue Wi-Fi Access Point | Fake AP with captive portal demonstrating credential harvesting, internet spoofing, and session logging. Security awareness training tool. | Python | 🔴 Offensive |
| 🐬 Flipper Zero Payload Suite | BadUSB payload collection for Windows/macOS/Linux — system recon reported via Discord webhooks. Built for authorized assessments. | DuckyScript | 🟠 Hardware |
| Stat | Value |
|---|---|
| 🚫 DNS Domains Blocked | 433,000+ |
| 🛑 IPs Banned (CrowdSec) | 15,000+ |
| ⚙️ Services Running | 11 |
| 💾 Hardware | Raspberry Pi 5 · 8GB RAM · 512GB NVMe |
| 🌐 Network | Gigabit Ethernet · DuckDNS · WireGuard VPN |
| Layer | Services |
|---|---|
| 🌐 Network | Pi-hole v6 · Unbound (DNSSEC) · WireGuard · DuckDNS |
| 🔐 Security | nftables · Fail2ban · CrowdSec · Cowrie SSH Honeypot |
| 📊 Monitoring | Grafana · Prometheus · Loki · Promtail |
| 🐳 Infra | Docker · Portainer · Heimdall |
| Link | Topic | |
|---|---|---|
| 📄 | Research Reports | AI-based threat detection · network defense |
| ✍️ | CTF Writeups | HackTheBox · TryHackMe walkthroughs |
| 📋 | CV | Full background & experience |
Research · Travel · Gaming