IT SECURITY · BLUE TEAM · AUTOMATION

Security-minded.
Technically curious.

I’m Daniel, an IT Security Specialist focused on Blue Team operations, SOC/SIEM, Linux, incident analysis and building practical security tooling.

Explore my work ↓ Get in touch ↗
Based in Austria· Security & infrastructure· Open to interesting problems
daniel@security:~

$ whoami

daniel_bretschneider

$ cat profile.txt

[+] Blue Team / SOC [+] Incident Analysis [+] Linux & Infrastructure [+] Python · Bash · PowerShell · Rust [+] Threat Intelligence / OSINT

$ status

● building & learning_
CYBER SECURITY✦BLUE TEAM✦LINUX✦AUTOMATION✦OSINT✦THREAT INTELLIGENCE✦ CYBER SECURITY✦BLUE TEAM✦LINUX✦AUTOMATION✦OSINT✦THREAT INTELLIGENCE
01 / About

Turning curiosity into practical security.

I’m an IT-Security Specialist with a background in Blue Team operations, SOC work and incident analysis. I like understanding how systems behave, finding what does not look right, and turning repetitive work into reliable automation.

My technical toolkit spans Python, Bash, PowerShell and Rust, alongside Linux, Windows, Microsoft 365 and server infrastructure. I hold a BSc in Information and Communication Systems from FH Technikum Wien.

PUBLISHED IN MEDIANET EU-Cyberabwehr bleibt lückenhaft Read my article
BScInformation & Communication Systems
4+Programming / scripting languages
∞Things still worth learning
02 / Expertise

What I work with.

Security, infrastructure and automation — with a preference for tools that solve real problems.

01

Security Operations

SOC workflows, SIEM, monitoring, incident analysis and investigation of suspicious activity.

SOCSIEMIR
02

Threat Intelligence

Cyber Threat Intelligence, OSINT research and security awareness with a practical investigative mindset.

CTIOSINTAwareness
03

Automation

Python, Bash, PowerShell and Rust for scripting, analysis, tooling and removing repetitive work.

PythonBashPowerShell
04

Infrastructure

Linux and Windows servers, Microsoft 365, troubleshooting and the infrastructure behind secure services.

LinuxWindowsM365
03 / Selected work

Things I’ve built
& investigated.

View GitHub ↗
01↗
DOMAIN INTELLIGENCE · GO

SurfaceIntel

A domain-intelligence tool for gathering and organising external-facing domain and infrastructure information for reconnaissance and security research.

GoDNSOSINTRecon
02↗
SECURITY TOOL · PYTHON

Python Security Log Analyzer

Parses and evaluates systemd journal logs to help identify suspicious activity, authentication anomalies and potential incidents.

PythonLinuxLogs
03↗
FORENSICS · TOOLING

MetaViewer

A streamlined metadata inspection tool inspired by exiftool, designed around fast and practical forensic analysis.

ForensicsMetadataSecurity
04↗
RESEARCH · OSINT

ICSFinder

Research into internet-exposed ICS/SCADA systems, with a focus on Austrian critical infrastructure and Shodan-based discovery.

ShodanSCADAOSINT
04 / Current focus
RIGHT NOW

Still learning.
Still building.

01

Practical OSINT Research

Working toward the Practical OSINT Research Professional certification.

02

Cyber Threat Intelligence

Deepening CTI knowledge through hands-on courses and practical research.

03

Homelab & Infrastructure

Experimenting with Ubuntu, Proxmox, Pi-hole, Zabbix and other security-focused tooling.

05 / Contact
HAVE A SECURITY PROBLEM TO SOLVE?

Let’s talk.

Whether it’s a security role, technical project, research idea or simply a good conversation about security — feel free to reach out.

daniel@bretschneider.cc ↗