diff --git a/assets/resume/Keith_Casko_IT_Cloud_Resume.pdf b/assets/resume/Keith_Casko_IT_Cloud_Resume.pdf
new file mode 100644
index 0000000..1a833d1
Binary files /dev/null and b/assets/resume/Keith_Casko_IT_Cloud_Resume.pdf differ
diff --git a/css/styles.css b/css/styles.css
index 259f07f..4c9fc9c 100644
--- a/css/styles.css
+++ b/css/styles.css
@@ -751,3 +751,19 @@ section { padding: 64px 0; }
   .lab-panel { padding: 18px; }
   .lab-tree, .lab-code { font-size: 12px; padding: 12px; }
 }
+
+/* Portfolio evidence-focused updates */
+.skills-grid-focused { grid-template-columns: repeat(2, minmax(0,1fr)); }
+.skills-grid-focused .skill-card { display:flex; flex-direction:column; gap:10px; }
+.skills-grid-focused .skill-card h3 { font-size:17px; font-family:Georgia,"Times New Roman",serif; margin:0; }
+.skills-grid-focused .skill-card p { color:var(--muted-2); font-size:14px; margin:0; flex:1; }
+.skills-grid-focused .view-link, .case-card .view-link { font-size:13.5px; font-weight:600; }
+.case-grid { display:grid; grid-template-columns: repeat(2,minmax(0,1fr)); gap:22px; }
+.case-card { background:var(--panel); border:1px solid var(--rule); border-top:3px solid var(--steel); padding:26px; border-radius:4px; }
+.case-label { display:block; font-size:12px; text-transform:uppercase; font-weight:700; color:var(--steel); letter-spacing:.4px; margin-bottom:8px; }
+.case-card h3 { font-size:20px; }
+.case-card p { font-size:14px; color:var(--muted-2); }
+.case-card p strong { color:var(--navy-2); }
+@media (max-width: 700px) {
+ .skills-grid-focused, .case-grid { grid-template-columns:1fr; }
+}
diff --git a/homelab.html b/homelab.html
index d0e01ee..8a6ae9b 100644
--- a/homelab.html
+++ b/homelab.html
@@ -24,6 +24,7 @@
           <li><a href="index.html#home">Home</a></li>
           <li><a href="index.html#projects" class="active">Projects</a></li>
           <li><a href="index.html#homelab">Homelab</a></li>
+          <li><a href="index.html#credentials">Credentials</a></li>
           <li><a href="index.html#troubleshooting">Troubleshooting</a></li>
           <li><a href="index.html#about">About</a></li>
           <li><a href="index.html#resume">Resume</a></li>
@@ -282,7 +283,7 @@ bglab\administrator</pre>
     <div class="container">
       <div>&copy; <span id="year">2026</span> Keith Casko. All rights reserved.</div>
       <ul class="footer-links">
-        <li><a href="assets/resume/Keith_Casko_IT_Cloud_Resume.docx" download>Resume</a></li>
+        <li><a href="assets/resume/Keith_Casko_IT_Cloud_Resume.pdf" download>Resume (PDF)</a></li>
         <li><a href="https://github.com/kcasko" rel="noopener">GitHub</a></li>
         <li><a href="https://www.linkedin.com/in/keith-casko/" rel="noopener">LinkedIn</a></li>
         <li><a href="mailto:keith.casko@gmail.com">Email</a></li>
diff --git a/index.html b/index.html
index 281747b..457d997 100644
--- a/index.html
+++ b/index.html
@@ -5,6 +5,14 @@
   <meta name="viewport" content="width=device-width, initial-scale=1.0" />
   <title>Keith Casko &mdash; IT Support, Systems Administration, Cloud Operations</title>
   <meta name="description" content="Keith Casko &mdash; IT portfolio: Windows Server, Active Directory, Linux, AWS, Docker, networking, and troubleshooting projects. Based in Kalamazoo, Michigan." />
+  <link rel="canonical" href="https://casko.dev/" />
+  <meta property="og:type" content="website" />
+  <meta property="og:title" content="Keith Casko | IT Support &amp; Systems Administration" />
+  <meta property="og:description" content="Real Windows Server, Active Directory, Linux, AWS, and troubleshooting projects, with verified outcomes and hands-on case studies." />
+  <meta property="og:url" content="https://casko.dev/" />
+  <meta property="og:image" content="https://casko.dev/assets/screenshots/bytegeist-infrastructure-live.png" />
+  <meta property="og:image:alt" content="ByteGeist infrastructure monitoring dashboard" />
+  <meta name="twitter:card" content="summary_large_image" />
   <link rel="stylesheet" href="css/styles.css" />
 </head>
 <body>
@@ -42,11 +50,11 @@
       <div class="container">
         <div class="hero-grid">
           <div>
-            <h1 id="hero-title">Building Reliable Systems.<br />Solving Real Problems.</h1>
+            <h1 id="hero-title">Hands-On IT Support.<br />Verified Systems Troubleshooting.</h1>
             <p class="lede">
-              Hands-on experience with Windows Server, Active Directory, Linux, AWS,
-              networking, Docker, monitoring, remote administration, and technical
-              troubleshooting.
+              I operate a Windows Server Active Directory domain, maintain monitored Linux
+              infrastructure, and build AWS applications. My project write-ups document
+              troubleshooting steps, fixes, and verification—not just installations.
             </p>
             <p>
               Currently completing a B.S. in Software Engineering at Western Governors
@@ -56,7 +64,7 @@
             </p>
             <div class="hero-actions">
               <a class="btn btn-primary" href="#projects">View Projects</a>
-              <a class="btn btn-secondary" href="assets/resume/Keith_Casko_IT_Cloud_Resume.docx" download>Download Resume</a>
+              <a class="btn btn-secondary" href="assets/resume/Keith_Casko_IT_Cloud_Resume.pdf" download>Download Resume (PDF)</a>
             </div>
           </div>
           <div class="hero-image">
@@ -153,160 +161,34 @@
       </div>
     </section>
 
-    <!-- ============ What I Work With ============ -->
+    <!-- ============ Technical Skills ============ -->
     <section id="homelab" aria-labelledby="skills-title">
       <div class="container">
         <div class="section-head">
-          <h2 id="skills-title">What I Work With</h2>
-          <span class="subtitle">Tools, platforms, and areas of practical experience</span>
+          <h2 id="skills-title">Technical Skills</h2>
+          <span class="subtitle">Tools demonstrated in the linked projects</span>
         </div>
-
-        <div class="skills-grid">
-
+        <div class="skills-grid skills-grid-focused">
           <div class="skill-card">
-            <div class="skill-head">
-              <svg class="ico" viewBox="0 0 24 24" fill="currentColor" aria-hidden="true">
-                <path d="M3 5.5 11 4v8H3V5.5zM13 3.75 21 2.5V12h-8V3.75zM3 13h8v7L3 18.5V13zm10 0h8v8.5L13 20v-7z"/>
-              </svg>
-              <h3>Windows &amp; Active Directory</h3>
-            </div>
-            <ul>
-              <li>Windows 10 / 11</li>
-              <li>Windows Server 2022</li>
-              <li>Active Directory</li>
-              <li>Users &amp; groups, OUs</li>
-              <li>Domain joins</li>
-              <li>File shares &amp; permissions</li>
-              <li>DNS</li>
-            </ul>
+            <h3>Windows &amp; Identity</h3>
+            <p>Windows Server 2022, Active Directory, DNS, domain joins, SMB/NTFS permissions</p>
+            <a class="view-link" href="homelab.html">See Windows Server lab</a>
           </div>
-
           <div class="skill-card">
-            <div class="skill-head">
-              <svg class="ico" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.8" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true">
-                <rect x="3" y="4" width="18" height="16" rx="1.5"/>
-                <path d="m7 9 3 3-3 3M12 15h5"/>
-              </svg>
-              <h3>Linux</h3>
-            </div>
-            <ul>
-              <li>Ubuntu</li>
-              <li>WSL2</li>
-              <li>Bash</li>
-              <li>SSH</li>
-              <li>Linux administration</li>
-            </ul>
+            <h3>Linux &amp; Infrastructure</h3>
+            <p>Ubuntu, Docker Compose, TLS routing, Prometheus, Grafana, Loki</p>
+            <a class="view-link" href="https://bytegeist.casko.dev/" target="_blank" rel="noopener noreferrer">See infrastructure lab</a>
           </div>
-
           <div class="skill-card">
-            <div class="skill-head">
-              <svg class="ico" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.8" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true">
-                <path d="M7 18a4 4 0 0 1-.9-7.9A6 6 0 0 1 18 10.5a3.5 3.5 0 0 1-.5 7H7z"/>
-              </svg>
-              <h3>AWS</h3>
-            </div>
-            <ul>
-              <li>EC2, S3, IAM</li>
-              <li>Lambda</li>
-              <li>API Gateway</li>
-              <li>DynamoDB</li>
-              <li>Amplify</li>
-              <li>Systems Manager</li>
-              <li>KMS</li>
-            </ul>
+            <h3>Cloud &amp; Automation</h3>
+            <p>AWS IAM, Lambda, API Gateway, DynamoDB, Amplify; PowerShell, Bash, Git</p>
+            <a class="view-link" href="https://supportlab.casko.dev/" target="_blank" rel="noopener noreferrer">See AWS project</a>
           </div>
-
           <div class="skill-card">
-            <div class="skill-head">
-              <svg class="ico" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.8" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true">
-                <circle cx="12" cy="4" r="2"/>
-                <circle cx="4" cy="20" r="2"/>
-                <circle cx="20" cy="20" r="2"/>
-                <path d="M12 6v6M12 12l-7 6M12 12l7 6"/>
-              </svg>
-              <h3>Networking</h3>
-            </div>
-            <ul>
-              <li>TCP/IP, IPv4 / IPv6</li>
-              <li>DNS, DHCP</li>
-              <li>SSH, HTTP/HTTPS, TLS</li>
-              <li>VPNs</li>
-              <li>Reverse proxies</li>
-              <li>Firewalls</li>
-            </ul>
+            <h3>Support &amp; Diagnostics</h3>
+            <p>TCP/IP, DHCP, DNS troubleshooting, secure-channel repair, access control, incident isolation</p>
+            <a class="view-link" href="#troubleshooting">See case studies</a>
           </div>
-
-          <div class="skill-card">
-            <div class="skill-head">
-              <svg class="ico" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.8" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true">
-                <path d="M4 14v-2a8 8 0 1 1 16 0v2"/>
-                <rect x="2.5" y="14" width="4.5" height="6" rx="1"/>
-                <rect x="17" y="14" width="4.5" height="6" rx="1"/>
-                <path d="M17 20a3 3 0 0 1-3 3h-2"/>
-              </svg>
-              <h3>IT Support</h3>
-            </div>
-            <ul>
-              <li>Troubleshooting</li>
-              <li>Customer &amp; remote support</li>
-              <li>Technical communication</li>
-              <li>Incident resolution</li>
-              <li>Permissions &amp; authentication</li>
-              <li>Connectivity testing</li>
-            </ul>
-          </div>
-
-          <div class="skill-card">
-            <div class="skill-head">
-              <svg class="ico" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.8" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true">
-                <rect x="3" y="4" width="18" height="5" rx="1"/>
-                <rect x="3" y="11" width="18" height="5" rx="1"/>
-                <rect x="3" y="18" width="18" height="3" rx="1"/>
-                <path d="M6.5 6.5h.01M6.5 13.5h.01"/>
-              </svg>
-              <h3>Infrastructure</h3>
-            </div>
-            <ul>
-              <li>Docker, Docker Compose</li>
-              <li>VirtualBox</li>
-              <li>Portainer</li>
-              <li>Grafana, Prometheus</li>
-              <li>Loki</li>
-              <li>Uptime Kuma</li>
-            </ul>
-          </div>
-
-          <div class="skill-card">
-            <div class="skill-head">
-              <svg class="ico" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.8" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true">
-                <rect x="2.5" y="4" width="19" height="12" rx="1.5"/>
-                <path d="M8 20h8M12 16v4"/>
-              </svg>
-              <h3>Remote Administration</h3>
-            </div>
-            <ul>
-              <li>RDP</li>
-              <li>Parsec</li>
-              <li>Tailscale</li>
-              <li>RealVNC</li>
-            </ul>
-          </div>
-
-          <div class="skill-card">
-            <div class="skill-head">
-              <svg class="ico" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.8" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true">
-                <path d="m8 7-5 5 5 5M16 7l5 5-5 5M14 5l-4 14"/>
-              </svg>
-              <h3>Scripting &amp; Tools</h3>
-            </div>
-            <ul>
-              <li>PowerShell</li>
-              <li>Bash</li>
-              <li>Git</li>
-              <li>GitHub</li>
-            </ul>
-          </div>
-
         </div>
       </div>
     </section>
@@ -345,80 +227,30 @@
       </div>
     </section>
 
-    <!-- ============ Troubleshooting Notes ============ -->
+    <!-- ============ Troubleshooting Case Studies ============ -->
     <section id="troubleshooting" aria-labelledby="notes-title">
       <div class="container">
         <div class="section-head">
-          <h2 id="notes-title">Troubleshooting Notes</h2>
-          <span class="subtitle">Short, practical case studies</span>
+          <h2 id="notes-title">Troubleshooting Case Studies</h2>
+          <span class="subtitle">Observed issues, diagnostic work, and verified outcomes</span>
         </div>
-
-        <div class="notes-list">
-
-          <article class="note-item">
-            <div class="icon" aria-hidden="true">DNS</div>
-            <div>
-              <h3>DNS Resolution Issue</h3>
-              <p>Client cannot reach a service by name but can reach it by IP &mdash; isolate DNS from general network connectivity.</p>
-              <ul>
-                <li>Confirm TCP/IP configuration with <code>ipconfig /all</code></li>
-                <li>Verify DNS server settings and search suffix</li>
-                <li>Test reachability with <code>ping</code> against both hostname and IP</li>
-                <li>Use <code>nslookup</code> against the primary and a known-good DNS server</li>
-                <li>Flush client resolver cache; compare behavior from another host</li>
-              </ul>
-            </div>
-            <div class="chevron" aria-hidden="true">&rsaquo;</div>
+        <div class="case-grid">
+          <article class="case-card">
+            <span class="case-label">Windows Server 2022 · Time Services</span>
+            <h3>PDC Emulator using its local CMOS clock</h3>
+            <p><strong>Problem:</strong> An AD domain controller reported <code>Local CMOS Clock</code> as its time source. Unreliable domain time can lead to Kerberos clock-skew failures.</p>
+            <p><strong>Action:</strong> Checked the source with <code>w32tm</code>, configured external NTP peers, restarted Windows Time, and resynchronized.</p>
+            <p><strong>Result:</strong> Verified <code>time.windows.com</code> as the source, stratum 5.</p>
+            <a class="view-link" href="homelab.html#validation">See commands and verification</a>
           </article>
-
-          <article class="note-item">
-            <div class="icon" aria-hidden="true">DKR</div>
-            <div>
-              <h3>Docker Networking Problem</h3>
-              <p>A container responds locally but is unreachable from other hosts, or outbound requests fail.</p>
-              <ul>
-                <li>Check container state with <code>docker ps</code> and <code>docker logs</code></li>
-                <li>Verify published ports and the attached Docker network</li>
-                <li>Confirm DNS resolution from inside the container</li>
-                <li>Check host firewall rules affecting the bridge or published ports</li>
-                <li>Test HTTP endpoints with <code>curl -v</code> from host and container</li>
-              </ul>
-            </div>
-            <div class="chevron" aria-hidden="true">&rsaquo;</div>
+          <article class="case-card">
+            <span class="case-label">Windows 11 · Active Directory</span>
+            <h3>Restoring a broken domain secure channel</h3>
+            <p><strong>Problem:</strong> WIN11-01 was bridged onto the physical LAN and could not reach DC01 on the VMware NAT subnet. Trust repair initially failed.</p>
+            <p><strong>Action:</strong> Changed the VM network to NAT, pointed client DNS at DC01, and repaired the machine-account trust.</p>
+            <p><strong>Result:</strong> <code>Test-ComputerSecureChannel</code> returned <code>True</code>; <code>nltest</code> located DC01 successfully.</p>
+            <a class="view-link" href="homelab.html#validation">See audit evidence</a>
           </article>
-
-          <article class="note-item">
-            <div class="icon" aria-hidden="true">AD</div>
-            <div>
-              <h3>Active Directory Permissions Issue</h3>
-              <p>A user authenticates successfully but cannot access a shared folder they should.</p>
-              <ul>
-                <li>Confirm the user's identity and group membership</li>
-                <li>Review share permissions and NTFS permissions separately</li>
-                <li>Check for deny ACEs that override group access</li>
-                <li>Validate authentication path and session with <code>whoami /groups</code></li>
-                <li>Test access from a known-good account to isolate user vs. share</li>
-              </ul>
-            </div>
-            <div class="chevron" aria-hidden="true">&rsaquo;</div>
-          </article>
-
-          <article class="note-item">
-            <div class="icon" aria-hidden="true">IAM</div>
-            <div>
-              <h3>AWS IAM Access Problem</h3>
-              <p>A workload or user receives <em>AccessDenied</em> when calling an AWS service.</p>
-              <ul>
-                <li>Identify the exact action, resource, and principal from the error</li>
-                <li>Review attached identity and resource policies against least privilege</li>
-                <li>Check for explicit denies, SCPs, and permission boundaries</li>
-                <li>Reproduce with the IAM Policy Simulator</li>
-                <li>Grant only the specific action needed; verify, then narrow further</li>
-              </ul>
-            </div>
-            <div class="chevron" aria-hidden="true">&rsaquo;</div>
-          </article>
-
         </div>
       </div>
     </section>
@@ -535,7 +367,7 @@
     <div class="container">
       <div>&copy; <span id="year">2026</span> Keith Casko. All rights reserved.</div>
       <ul class="footer-links">
-        <li><a href="assets/resume/Keith_Casko_IT_Cloud_Resume.docx" download>Resume</a></li>
+        <li><a href="assets/resume/Keith_Casko_IT_Cloud_Resume.pdf" download>Resume (PDF)</a></li>
         <li><a href="https://github.com/kcasko" rel="noopener">GitHub</a></li>
         <li><a href="https://www.linkedin.com/in/keith-casko/" rel="noopener">LinkedIn</a></li>
         <li><a href="mailto:keith.casko@gmail.com">Email</a></li>