Enterprise controls
Endpoint hardening, application control, browser baselines, identity controls, and cloud security policy.
CYBERSECURITY / ENGINEERING / RESEARCHSecuring systems.
Securing systems.
Understanding how they break.
I’m Brandon Scott Gregory, a Cybersecurity Engineer focused on enterprise identity and endpoint security, security operations, and technical investigation. I graduated from SANS Technology Institute with a Bachelor of Science in Applied Cybersecurity. My research includes Windows reverse engineering, vulnerability analysis, and reproducible lab investigations.
Cybersecurity EngineerSANS B.S. Applied CybersecurityWindows reverse engineering
research.log ACTIVE LEARNING
scope: authorized environments method: observe → reproduce → verify output: evidence-driven reports
CORE FOCUS
Where operations meets research
Practical security engineering, repeatable investigations, and technical documentation.
Security investigations
Microsoft Sentinel investigation workflows, authentication telemetry, KQL, and incident resolution documentation.
GregoGuard Lab
Windows PE analysis, x64dbg, Ghidra, file-format analysis, crash triage, and binary patch validation.
FEATURED ENGINEERING
From policy design to investigation
Three representative professional workstreams with documented methods and limitations.
Identity & Session Security Engineering
Plan report-only observation, pilot exclusions and readiness validation for stronger identity protection.
Conditional Access · Device-bound sessions · pilot designRead the engineering case studyEndpoint Application Control & Browser Hardening
Validate enforceable application controls and benchmark-aligned browser settings while addressing compatibility.
AppLocker · Intune · Group Policy · CISRead the engineering case studyEvidence-Based Incident Investigation
Correlate identity and endpoint signals, investigate context, and document supported incident dispositions.
Microsoft Sentinel · Defender · KQLRead the engineering case studyFEATURED RESEARCH
Evidence over claims
Two completed lab case studies with reproducible observations and clearly stated limitations.
Windows x64 CrackMe
Recovered the activation algorithm and validated a one-byte branch patch (JNE → JMP) on a controlled exercise.
Completed · Controlled labExplore projectFile-parser boundary check
Diagnosed an access violation, identified an unchecked copy loop, and verified a 26-byte hotfix with five regression tests.
Completed · Controlled labExplore projectEDUCATION & CREDENTIALS
SANS graduate. Applied cybersecurity expertise.
Bachelor of Science in Applied Cybersecurity from SANS Technology Institute, backed by professional GIAC and other credential history. Explore the public issuer-linked badge collection on Credly.
CONNECT
Get in touch →Interested in security engineering or research?
For professional opportunities, collaboration, or a technical discussion, email me directly.