Security & Incident Response
When something looks wrong, I move fast. I've contained live social-engineering attacks before a payload ever ran, managed EDR across client fleets, and turned every incident into hardening.
ᏣᎳᎩCherokeeSystems · Security · Automation
DaltonSweet
❯ Systems Administrator II▍
Curious about how everything works — from the cosmos to the command line.
Systems Administrator II · The Computer Guy, Inc. · taking select side projects- DRDatto RMM
- M3Microsoft 365
- UNUniFi
- ZEZephyra
- EIEntra ID
- AUAutoElevate
- ININKY
- FCFortiGate Cloud
- GRGraphus
- DNDNSFilter
- SASaaS Alerts
- GWGoogle Workspace
- DWDark Web ID
- MSMSP360
- MYmyITprocess
- NGNetwork Glue
- MDMicrosoft Defender
- OSOneDrive & SharePoint
- WSWindows Server
- CCCisco Catalyst
- AWAWS
- BLBluehost
- OCOctane
- PEProofpoint Essentials
- CICarestream Imaging
- CLCloudflare
- WSWix & Squarespace
- JHJavaScript & HTML/CSS
- CJC#, Java & C++
- SESentinelOne
- WEWebroot
- PAPaperCut
- WIWireshark
- DPDistributor portals
- FEFortiClient EMS
- GPGroup Policy
- ECEntra Connect
- GAGAMADV-XTD3
- BTBeyondTrust
- QBQuickBooks
- DBDropbox Business
- FOFortiGate
- DEDatto EDR
- AUAutotask
- RORocketCyber
- IGIT Glue
- RERewst
- EOExchange Online
- SPSplashtop
- CICIPP
- THThread
- VXVSA X
- BIBullPhish ID
- HOHornetsecurity
- RTRapidFire Tools
- MYMyGlue
- KAKaseyaOne
- AZAzure
- POPowerShell
- ADActive Directory
- GIGitHub
- GOGoDaddy
- AUaudiT
- WIWiseStamp
- XPXBlue PBX
- CLClaude
- WOWordPress
- PYPython
- PSPHP & SQL
- NINinjaOne
- CRCrowdStrike
- CMCisco Meraki
- NMNmap
- KQKaseya Quote Manager
- FMFortiManager
- HVHyper-V
- RDRemote Desktop Services
- MGMicrosoft Graph
- BABarracuda
- SBSpanning Backup
- NANAS storage
- NXNexus
// aboutSecurity-minded.
D.SWEET · CLEARANCE: CURIOUS
Security-minded.
Operator at heart.
D.SWEET · CLEARANCE: CURIOUSI'm Dalton. At The Computer Guy, I look after a whole portfolio of client businesses: Microsoft 365 tenants, FortiGate and UniFi networks, endpoint fleets in Datto RMM, and whatever lands in the queue at 2 a.m.
I came up through cybersecurity, with an associate's from Tulsa Community College and a bachelor's from Northeastern State University, and ran a managed services practice before my current role. That mix shapes how I work: think like a defender, build like an operator, and explain it in plain English.
Off the clock I build websites, tinker with PC hardware, and read far too much about cosmology and physics.
More about me →3+years in IT operations
8certifications incl. SSCP
82tools across my career
8engineering case studies
What I do
The work I do every day, across a wide mix of client environments.
Microsoft 365 & Identity
Daily administration across multiple client tenants: Entra ID, Exchange Online, OneDrive migrations, and the DNS behind it all. SPF, DKIM and DMARC done right, so mail actually lands.
Networks & Firewalls
FortiGate firewalls managed as a fleet, plus UniFi gateways, switches and APs. VLAN design, secure remote access, Wi-Fi that holds up, and log forensics that can tell a bad config from a failing PSU.
Automation & Endpoints
Datto RMM components and PowerShell that deploy, patch and report silently, with custom status fields so nothing quietly falls through the cracks.
Governance & Compliance
Assessments against NIST CSF 2.0, PCI DSS v4.0.1 and regulated-industry controls. I turn frameworks into plain-language fixes a business can act on.
Web & Development
I build too: client websites, Nexus on Cloudflare Workers, D1 and R2, and small tools like Zephyra that cut busywork for technicians.
What I keep running
The stack behind my day job at a Tulsa MSP, live. Click a node to see how I use it, or launch an attack and watch which layer stops it.
BASELINE · MFA · SPF / DKIM / DMARC · DNS filtering · least-privilege admin · tested backups · documented SOPs
// process
How I work
Four steps, replayed on a real incident: nine FortiGates that could reach FortiGuard but couldn't pull a single update. Scroll to run it.
- 01Assess
Understand the environment before touching it: inventory, logs, and the people who actually use it.
- 02Secure
Close the gaps that matter most first. Here that meant separating reachability from service health, layer by layer.
- 03Automate
If I have to do it twice, I script it. One change, pushed across the fleet, with every device reporting back.
- 04Document
Leave it better than I found it: an SOP for the next tech and a plain-language summary for the client.
ᏣᎳᎩ // rootsCherokee roots.
Cherokee roots.
Future systems.
My heritage is Cherokee, and I'm from the Cherokee Nation in northeastern Oklahoma. It's part of how I see technology.
In 1821 Sequoyah finished something remarkable: a writing system for the Cherokee language, built from scratch, one character for each syllable. Within a few years thousands of Cherokee people were reading and writing it, and in 1828 the Cherokee Phoenix was printing the news in Cherokee and English.
That's the kind of system I admire most: built by someone who understood the people it was for, simple enough to learn quickly, and still in use two centuries later. The glyphs that flicker across this site as text decrypts are Sequoyah's syllabary.
- 1821
- syllabary completed
- 85
- characters
- 1828
- Cherokee Phoenix first printed
// look up
The bright cluster in the corner of the sky is the Pleiades, ᎠᏂᏧᏣ Anitsutsa, the boys who danced their way into the sky. The pale band across it is the Milky Way: in Cherokee telling, the trail left where a dog ran off with stolen cornmeal. Hover or tap near them.
Ꮳ
tsahover a character
| a | e | i | o | u | v | |
|---|---|---|---|---|---|---|
| · | ||||||
| g | ||||||
| h | ||||||
| l | ||||||
| m | ||||||
| n | ||||||
| qu | ||||||
| s | ||||||
| d/t | ||||||
| dl/tl | ||||||
| ts | ||||||
| w | ||||||
| y |
also
Featured case studies
Detailed write-ups of real engineering work. Customer details are withheld, and each one describes the work that was actually done.
01Network engineeringOngoing
Multi-Site Network Infrastructure & Fortinet Security Engineering
FortiGate networks across many customer environments: IPsec to UniFi, VLAN segmentation, SAML remote access after firmware changes, and a FortiGuard connectivity incident on nine firewalls.
- FortiGate
- FortiOS 7.6 / 8.0
- FortiManager
- FortiClient EMS
- FortiGuard (FDN)
- IPsec
05Software engineeringOngoing
Nexus: Unified Productivity & Communication Platform
Independent Cloudflare-based SaaS: unified inboxes, calendar, tasks and follow-ups across work, family and personal contexts. Built on Workers, D1, R2 and Microsoft Graph.
- Cloudflare Workers
- Cloudflare D1
- Cloudflare R2
- JavaScript
02Cloud & collaborationDesign / assessment
Enterprise Cloud Storage Migration & Collaboration Modernization
Dropbox to SharePoint migration and Microsoft 365 collaboration setup, plus a separate 3 TB / 13-user modernization assessment comparing SharePoint, Azure Files and a hybrid design, with NAS preservation first.
- SharePoint Online
- OneDrive
- Microsoft 365
- Dropbox Business
- 03Server Infrastructure Consolidation & Office DecommissioningInfrastructure→
- 04Managed Security Operations & Endpoint Privilege ManagementSecurity operations→
- 06Microsoft 365 Administration & Enterprise Identity ManagementCloud & identity→
- 07Infrastructure Monitoring, Alert Engineering & MSP AutomationAutomation & monitoring→
- 08Advanced Technical Troubleshooting & Operational RecoveryTroubleshooting→
// transmissions
All posts →Latest from the blog
Fragmented Security Systems
Piling on security tools without a plan creates silos that hide risk and make audits painful. Here is why consolidation and integration matter more than another dashboard.
Kaseya 365 vs Pax8: The MSP Pick
Too many vendors, logins and renewals slow an MSP down. A practical comparison of Kaseya 365 and Pax8, and which one fits which kind of shop.
Lateral Movement Attacks: The Hidden Threat
Attackers rarely stop at the first machine they reach. How lateral movement works inside a network, and the controls that keep one compromise from becoming many.