Research Assistant
Apr 2026 — Aug 2026Nottingham Trent University
Researched how AWS Lambda telemetry can support evidence preservation and incident reconstruction.
- Built ForensicReadyLambda, a Python toolkit to audit logging readiness, collect CloudTrail and CloudWatch records, and reconstruct incident timelines through customer-accessible AWS APIs.
- Implemented SHA-256 integrity checks, CloudTrail digest checks and evidence preservation with S3 Object Lock.
- Tested four controlled attack scenarios. Configured logging captured every expected evidence item, while each comparison configuration missed one.

