Not every attacker trips an alert. I find the ones who do not. Signs of compromise, suspicious activity, containment, and helping organisations understand exactly what happened before it becomes tomorrow's headline.

After office hours the curiosity turns into vulnerability research. Bug bounty through to 0-day hunting, finding the flaw before someone less friendly does. Reports have landed at NASA, Ferrari, WHO, UNESCO, Nokia and multiple U.S. government agencies, and my first double CVE arrived along the way.

Hardware hacking, Flipper Zero, Raspberry Pi, Wi-Fi, RFID, NFC, IoT, pwning labs, and convincing myself that buying another gadget counts as research .