Skip to content
View Ronoh12's full-sized avatar

Block or report Ronoh12

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
Ronoh12/README.md

Rodgers Rono

IT Infrastructure • Networking • Cybersecurity • Security Operations

IT professional with hands-on experience across IT support, network administration, infrastructure deployment, cybersecurity and security operations.

I build practical security tools, Blue Team labs and enterprise software projects focused on solving real-world technical and operational problems.


Core Technical Areas

  • IT Support & Operations
  • IT Infrastructure
  • Network Administration & Troubleshooting
  • Network Security
  • Cybersecurity
  • Security Operations / Blue Team
  • Threat Detection
  • Incident Investigation
  • Log Analysis
  • Security Automation
  • Linux & Windows Administration
  • Enterprise Software Development

Featured Project — ORNEXIS ONE

ORNEXIS ONE is a multi-tenant enterprise operations platform designed to help organizations manage users, roles, permissions, workflows, service operations, documents, assets, security functions and integrations from one unified platform.

The project demonstrates enterprise software architecture, security-focused access control, multi-tenancy and the development of a scalable operational platform.

Technology

TypeScript • Node.js • PostgreSQL • Prisma • React • REST APIs • RBAC • Multi-Tenant Architecture

Repository:
https://github.com/Ronoh12/ornexis-one


Cybersecurity & Blue Team Projects

SOC Analyst Lab

Hands-on SOC environment focused on investigating security alerts, analysing logs, performing incident triage and documenting response activities.

Areas: SOC • Incident Response • Log Analysis • Blue Team

https://github.com/Ronoh12/soc-analyst-lab


Security Event Correlator

Python security tool that correlates Linux authentication and firewall logs into incident-style findings with risk scoring to support SOC investigations.

Areas: Python • Detection Engineering • Log Correlation • Blue Team

https://github.com/Ronoh12/security-event-correlator


Nmap XML Risk Report

Python tool that parses Nmap XML scan results and generates risk-scored Markdown and JSON reports, including high-risk port summaries.

Areas: Python • Nmap • Risk Analysis • Network Security

https://github.com/Ronoh12/nmap-xml-risk-report


Linux Hardening Validator

Security validation project for evaluating Linux hardening controls using CIS, ISO/IEC 27001 and NIST CSF mappings with risk-based reporting.

Areas: Python • Linux • CIS • Security Hardening

https://github.com/Ronoh12/linux-hardening-validator


Authentication Log Analyzer

Python Blue Team tool that analyses Linux authentication logs to identify suspicious login activity and potential brute-force attempts.

Areas: Python • Authentication • Log Analysis • Threat Detection

https://github.com/Ronoh12/auth-log-analyzer


Windows Security Audit

Windows host security auditing project using PowerShell to collect and analyse security-relevant system information including firewall configuration, users, services and network exposure.

Areas: PowerShell • Windows Security • Security Auditing • Blue Team


Wireshark Network Investigation

Network traffic investigation project using Wireshark to analyse DNS, TCP, TLS and HTTP traffic and document packet-level findings.

Areas: Wireshark • Network Analysis • Network Forensics • Packets


Malicious Traffic Analysis

Network traffic investigation focused on identifying suspicious HTTP communication and potentially malicious network behaviour.

Areas: Wireshark • Threat Analysis • Network Security • SOC


Home SOC Lab

Home SOC environment designed to detect authentication attacks using Windows event logs and network traffic analysis.

Areas: SOC • Windows Security • Threat Detection • Incident Response


Tools & Technologies

Security & Blue Team

Nmap • Wireshark • Wazuh SIEM • Kali Linux • Windows Event Logs • Linux Authentication Logs • Log Analysis • Incident Investigation

Networking & Infrastructure

TCP/IP • DNS • DHCP • VLANs • Routing & Switching • Network Troubleshooting • Linux Administration

Systems

Linux • Windows • PowerShell

Programming & Automation

Python • TypeScript • JavaScript • Node.js

Web & Application Development

React • REST APIs

Data & Infrastructure

PostgreSQL • Prisma • Docker

Security Architecture

RBAC • Multi-Tenant Architecture • Authentication • Authorization

Version Control

Git • GitHub


Current Focus

I am currently strengthening my experience across:

  • IT Infrastructure & Operations
  • Network Administration & Security
  • Security Operations & Blue Team
  • Threat Detection & Incident Investigation
  • Network Traffic Analysis
  • Security Automation
  • Enterprise Software Architecture

Professional Portfolio

My full portfolio includes my professional background, technical skills, experience, education and selected projects.

Live Portfolio:
https://rodgers-portfolio-ten.vercel.app


Connect

LinkedIn:
https://www.linkedin.com/in/rodgers-rono-a142a5188

GitHub:
https://github.com/Ronoh12

Portfolio:
https://rodgers-portfolio-ten.vercel.app


Building practical technology solutions across infrastructure, networking, cybersecurity and enterprise systems.

Pinned Loading

  1. ornexis-one ornexis-one Public

    Multi-tenant enterprise operations platform for workflows, service management, access control, assets, documents, security operations and integrations.

    TypeScript

  2. soc-analyst-lab soc-analyst-lab Public

    SOC Analyst lab for investigating security alerts, log analysis, incident triage, and response documentation.

  3. security-event-correlator security-event-correlator Public

    Correlates Linux authentication and firewall logs into incident-style findings with risk scoring, supporting SOC-style analysis and Blue Team investigations.

    Python

  4. nmap-xml-risk-report nmap-xml-risk-report Public

    A Python tool that parses Nmap XML scan results and generates risk-scored Markdown and JSON reports, including high-risk port summaries and an automated clean vs risky network comparison.

    Python

  5. linux-hardening-validator linux-hardening-validator Public

    Validates Linux hardening controls using CIS, ISO/IEC 27001, and NIST CSF mappings with risk-based assessment and management-focused reporting.

    Python

  6. auth-log-analyzer auth-log-analyzer Public

    A Python Blue Team tool that analyzes Linux authentication logs to detect suspicious login activity and potential brute-force attempts, producing risk-scored summaries and structured JSON reports.

    Python