Stage Map

Athens → Santa Cruz → Monterey Bay

Core Security Principles

Governance, Controls, Physical Security & Resilience

From Electrons to Bits to Code

How the Newest GPU & Quantum Chips Are Made

ISACA Audit Methodology

API Security, Secrets & Cloud Guardrails

Automated Audit with Claude Tools

AI-Powered Detection and Response

Workflows, Artifacts & the G-I-A Risk Framework

Deep G-I-A Assurance, Evidence Integrity & the Audit Function

Find the Real Cause — Audit, Forensics & Incident RCA

Adversary Tactics & Techniques

Thinking Like an Analyst — Kill Chain to ATT&CK

AI/ML Adversarial Threat Landscape

AI Application Security

Foundation Models, Agentic AI & Governance

From data and training to generative AI and MLOps

Quantum Physics & Computing from Scratch

Spin, Tunneling, Atoms & the Strange Rules of Reality

Qubits, Algorithms & Cryptographic Threats

NIST PQC Standards & Implementation

QKD, Agility & Enterprise Migration

CBOM, Migration Programs & Governance

PQC in Production — Discovery to Cutover

Side Channels, Faults & Hardware Attacks

Hacking the Systems Behind the New Space Race

Links, Ground Segments & Constellations

Hacking Electric, Connected & Self-Driving Vehicles

The Software-Defined Vehicle, Deeper

Hacking Robots, Drones & Autonomous Machines

Fleets, Farms, Swarms & Learned Behavior

Securing ICS, SCADA & the Physical World

Hands-on red-team exploitation — the EternalBlue kill chain

Map the attack surface — nmap, NSE, and content discovery

SQL injection, Burp, XSS, and file inclusion — the OWASP web attacks

Hydra, John, Hashcat — online brute force to offline cracking

From foothold to root / SYSTEM on Linux and Windows

Wireshark, tcpdump, MITM, and exfil detection

BloodHound, Kerberoasting, and the path to Domain Admin

Crack WPA2, raise an evil twin, and defend the air

From a memory bug to a shell — and the mitigations that stop it

A complete authorized red-team engagement, end to end