Skip to content
~/mandrakis

cat ./research

Research

The verifiable record: things built, things found, and the certification path in progress. Tooling and write-ups are added here as they are published.

Engineering & Tooling

  • Custom university SOC stack

    In production

    Designed and built in-house rather than bought as a managed service. Wazuh as SIEM core, integrated through a custom Python layer with MISP threat intelligence and CrowdSec community reputation data — extended with a separate node feeding deduplicated decisions with preserved TTL. The integration extracts observables from alerts, enriches and scores them, and drives custom Wazuh detection rules that trigger automated firewall-level blocking via active response. Dashboarded in OpenSearch.

Disclosures

  • Piraeus Bank e-banking authentication flaw

    Responsible disclosure · ~2000

    The first-generation e-banking platform exposed a hidden navigation element that passed the account number as a GET parameter. Altering it granted access to any account. Found as a student, reported to the bank.

Certifications & Education in Progress

  • CRTO — Certified Red Team Operator ↗

    In progress

    Hands-on red team operator certification: adversary simulation, C2, evasion, and Active Directory attack paths.

  • OSEP — Offensive Security Experienced Penetration Tester

    Planned

    Advanced evasion and exploit development. The deliberate next step — depth of specialisation over checkbox certifications.

  • M.Sc. Computer & Network Security

    In progress · Open University of Cyprus

    Postgraduate study focused on the offensive/defensive crossover.

  • ISO 27001 Lead Implementer

    In progress · PECB

    Governance-side credential from the day-to-day CISO practice.

  • CISM — Certified Information Security Manager

    Planned · 2026–2027

    ISACA management-level certification.