Project & publishing tools

The tools documented in Chronos, http-evm-rpc-info, and this site's publishing stack. This is a guide to their roles in the work, not a list of personal hardware or a daily setup. See the dated project and writing snapshot on /now.

Security lab · Chronos

Cowrie: SSH and Telnet honeypot used to capture login attempts and commands in the Chronos study.
Vector: Ships sensor logs, buffers events, and normalizes and classifies telemetry in the SOC core.
OpenSearch: Indexes Chronos telemetry for queries, dashboards, and findings reports.
Splunk: A second SIEM in Chronos for comparing SPL detections with the OpenSearch pipeline.
TheHive: Receives session-level and honeytoken alerts from the Chronos triage automation.
AWS CloudTrail: Provided the API-call history used to study bait-key use while the honeytoken account remained accessible.

EVM tooling · http-evm-rpc-info

Nmap: Runs the custom NSE script to probe EVM JSON-RPC endpoints and report client and chain information.
Lua: Implementation language for the NSE script, including JSON-RPC requests and response classification.

Publishing

Astro: Builds this portfolio from page templates, components, and content collections.
TypeScript: Defines this site’s content helpers and shared page data.
Markdown: Stores the posts and project write-ups rendered by this site.
GitHub: Hosts the public Chronos and EVM reconnaissance repositories and the portfolio source.
Substack: Original publication home for the imported research posts and essay.