Cybersecurity
Microsoft Certified: SC-200 • SC-100 • SC-500 • CySA+ • PCDRA • Splunk • KQL Ninja
- 🔍 Detection Engineering: KQL, Sigma, YARA for advanced hunting across Splunk, Azure Sentinel & Elastic Stack.
- 🛡️ SOC Operations: Incident investigation, alert triage & response playbook creation with Microsoft Defender, CrowdStrike, open-source tools.
⚠️ Vulnerability Management: Qualys, Tenable, Rapid7 for vulnerability detection and mitigation.- 🕵️♂️ Forensics & Threat Analysis: Process/file/network telemetry analysis; TheHive, GRR, Volatility expertise.
- 💻 Automation & Scripting: PowerShell, Python, Bash scripts automate audit, hunt, response workflows.
- ☁️ Cloud Security & DevSecOps: AWS, Azure Security Center, container security with Docker & Kubernetes.
- 📚 Frameworks & Standards: NIST CSF, MITRE ATT&CK, CIS Controls, OWASP.
| Repository | Description |
|---|---|
| Tor Detection Framework | Risk-based Tor detection leveraging KQL, Sigma & automated playbooks |
| SOC PowerShell Toolkit | 70+ production PowerShell scripts for audit, hunt & incident response |
| Invoke-ThreatHunt | Simple Powershell script tolol for quick anlysis of event ID based anomalies |
