logo
NotesNotesResumeResume
© 2026 Kiet Nguyen
Calm monitoring field with a single severity indicator — security analysis

Security analyst · Linux host literacy · blue-team craft

Security analysis turns raw systems behavior into defensible decisions.

Prevention is not a plan; continuous detection is. Growing detection thinking, investigation process, and clear write-ups.

Scroll

Introduction

Meet me in the shell

Type whoami, analyze, or skills — a small read-only shell for the security analyst path.

intro-shell — analyst · linux · detect

Portfolio shell — type a command and press Enter
────────────────────────────────────────────────
Guest session. Not a remote host.
Path: Security analyst · Linux host literacy · blue-team craft
 
Start with:  whoami
Or:  analyze  ·  tree  ·  help
 
power@user42:~$

Project index

Prefer Status, Details, and the detail page over the name alone. Complete means listed outcomes hold for a stated revision; In progress and Study are intentional.

2026 — Systems depth & automotive signals

DevOps-first host automation and Linux toolchain proof, plus embedded depth signals. Prefer Status, Details, and the detail page over the name alone.

ProjectDomainDetailsStatusStack
Artifact & Release Governance PipelineToolchainmulti-stage promote · sha256+HMAC · fail-clear · secret proof · release ledgerCompletePython 3 · JSONL audit · file registry · GitHub Actions
Automated Server SetupToolchainIdempotent Bash bootstrap · SSH harden · ufw · nginx · self-checkCompleteBash · Ubuntu · OpenSSH · ufw · nginx · Multipass · Docker/Colima
Basic CI/CD PipelineToolchainunittest · containerized CI · needs-gated deploy · docker saveCompletePython 3 · unittest · Docker · GitHub Actions
Host Health ReportToolchainCPU/mem/disk · interpreted report · systemd timer · JSON+textCompletePython 3 · systemd timer · JSON · Linux /proc
Observability & Incident Response PlatformToolchainmetrics history · proven alerts · do-no-harm snapshot · correlate · PIR reportCompletePython 3 · SQLite · JSONL alerts · HTML dashboard

Showing 1–5 of 6

1 / 2

host truth firsthost truth first

Technical notes

Notes on learning processes, concepts explained and an practical arena with Feynman Technique applied.

All notes →
Zine collage — Python object as identity, type, and value with a name binding
SpotlightPythonSystems
Decoding “Everything is an object” in Python
Jul 3, 2026 · 7 min read

Python’s slogan is a runtime contract, not poetry: values are objects with identity, type, and payload; names are bindings, not typed boxes. What it means, where it is honest, and where it bends.

Featured noteRead more

Recent notes

5 latest
  • Understand YAML under 10 minutes
    Jun 13, 2026

    A dense, honest pass over YAML as the language of pipelines: structure, types, gotchas, and the patterns that show up in GitHub Actions, GitLab CI, and Jenkins-adjacent configs, so continuous testing YAML stops looking like magic.

    8 min·YAML · CICD

  • Von Neumann architecture — an overview breakdown
    May 22, 2026

    A working breakdown of the von Neumann (stored-program) model: shared memory for code and data, CPU control and ALU, I/O, the system bus, the fetch–decode–execute cycle, the von Neumann bottleneck, and how the idea shows up (and is bent) on modern MCUs.

    7 min·Computer Architecture · Foundations

  • What is regular expression, and why should I care?
    May 10, 2026

    Regex as a practical pattern language for logs, configs, CI gates, and interviews—enough mental model to use grep, journalctl, and validation scripts without drowning in theory.

    7 min·Linux · Toolchain

  • Why comprehend how an operating system works?
    Apr 16, 2026

    A general blueprint for OS literacy: processes, memory, files, time, identity, devices, and isolation, so software stops treating the machine as magic. Not a tour of any one commercial OS.

    9 min·OS · Systems

  • systemd, broken down
    Apr 14, 2026

    what systemd is, PID 1, units, targets, systemctl, journalctl, network targets, API filesystems. Grounded in systemd.io and Grokipedia.

    14 min·Linux · systemd

Get in touch

Building blue-team craft on systems depth. Open to security analyst, SOC, and detection-focused roles.

Territory

Muse Library

A visual scratchpad - living shelf of stills imagined exploring through natural language.