James Ruggles
A nine-VM enterprise network for a fictional business: built, hardened, monitored, and defended through a week of adversarial pentesting, with an AI-assisted incident-response stack at its core.
EnterpriseSuricataActive DirectoryAI IRBlue Team
9
VM nodes
21
findings documented
1 wk
under attack
Team 6
security lead

Build, then defend

My capstone team stood up a full enterprise network for a fictional dog-rental company: web, database, Active Directory, DNS, firewall, the works. Then we hardened it and defended it live while other teams attacked for a week.

I led the web and AI infrastructure and served as security lead, wiring an incident-response loop that pairs an intrusion detection system with an auto-blocking layer and an AI agent for triage.

Suricata IDSwatches trafficautoblockflags + dropsOpenClaw agenttriage + personaTeam responsedocumentedAI-assisted incident response loop9-VM enterprise network · defended through a week of adversarial pentesting

What came out of it

Twenty-one vulnerability findings documented from pentest week, and a 480-line writeup covering the architecture, the hardening, and what got through anyway.

The interesting part was watching the AI-assisted response cut the time between an alert and a decision, and learning where a human still has to be in the loop.

Next
Project

OpenClaw Assistant