Ahmad Shaukat builds security and compliance programs for US defense contractors: CMMC, NIST SP 800-171 and ISO 27001, plus detection and response and the migrations underneath them.https://ahmadwhosecures.is-a.dev/https://ahmadwhosecures.is-a.dev/writing/migrationwiz-mailbox-size-is-not-source-size/https://ahmadwhosecures.is-a.dev/writing/migrationwiz-mailbox-size-is-not-source-size/Why MigrationWiz showed some Gmail mailboxes at nearly twice the size Google reported, how to measure the label multiplier and what it changes for limits and pass times.Mon, 12 Oct 2026 00:00:00 GMThttps://ahmadwhosecures.is-a.dev/writing/aadsts50079-security-defaults-to-conditional-access/https://ahmadwhosecures.is-a.dev/writing/aadsts50079-security-defaults-to-conditional-access/Why a migration service account failed destination authentication under Entra Security Defaults, and how a five-policy Conditional Access baseline replaced them without weakening the tenant.Mon, 12 Oct 2026 00:00:00 GMThttps://ahmadwhosecures.is-a.dev/writing/wazuh-all-in-one-on-ubuntu-24-04/https://ahmadwhosecures.is-a.dev/writing/wazuh-all-in-one-on-ubuntu-24-04/A condensed build guide for a single-node Wazuh SIEM covering about 80 Windows endpoints, from memory sizing and disk layout to agent rollout through RMM and the first custom rules.Mon, 12 Oct 2026 00:00:00 GMThttps://ahmadwhosecures.is-a.dev/writing/kape-and-thor-lite-triage/https://ahmadwhosecures.is-a.dev/writing/kape-and-thor-lite-triage/A repeatable Windows triage workflow practised on a lab machine. Collect with KAPE, preserve, parse with Eric Zimmerman's tools, scan with THOR Lite, then correlate before calling anything a finding.Mon, 12 Oct 2026 00:00:00 GMThttps://ahmadwhosecures.is-a.dev/writing/building-a-reversible-windows-hardening-tool/https://ahmadwhosecures.is-a.dev/writing/building-a-reversible-windows-hardening-tool/Design notes from Win11-Security-Optimizer: read-only scans, before-state backups, a rollback script that standard users cannot tamper with, risk tiers and opt-in DFIR tools checked against pinned hashes.Mon, 12 Oct 2026 00:00:00 GMT