SOC / SIEM
Elastic SIEM Endpoint Telemetry (Sysmon)
Fleet-managed endpoint telemetry pipeline using Sysmon v15+ validated with KQL queries in Kibana Discover.
Projects
Cybersecurity projects aligned with SOC analyst and DFIR workflows.
SOC / SIEM
Elastic SIEM Network Telemetry (Zeek)
Deployed Zeek sensor and ingested DNS and connection logs into Elastic SIEM.
SOC / SIEM
Splunk Detections & Dashboards
SPL detections and dashboards for authentication failures and suspicious activity.
DFIR
Digital Forensics Investigation
Reconstructed an intrusion timeline using logs and forensic artifacts.
Threat Intelligence
IOC Hunting & CTI Analysis
Processed 30,000+ indicators to support CTI enrichment workflows.
Computer Architecture
8-bit ALU & Simple CPU
Designed and implemented an 8-bit CPU in Logisim-evolution.