Cybersecurity student focused on incident response, digital forensics, memory analysis, disk artifacts, network evidence, log review, threat hunting, and evidence handling. I build investigation-focused projects and document findings like a junior DFIR analyst preparing for real SOC and incident response work.
Memory
Volatility-based investigation of a compromised Windows memory image to identify suspicious processes, command history, network connections, injected code indicators, and evidence suitable for an incident timeline.
Network
Wireshark-led packet investigation focused on suspicious sessions, DNS activity, TLS metadata, protocol anomalies, IOC extraction, and clear evidence notes for escalation.
Incident Response
Event log triage workflow for authentication activity, PowerShell execution, service creation, scheduled tasks, persistence hints, and high-confidence incident response findings.
Evidence
Forensic reporting workflow covering acquisition notes, chain of custody, hashing, artifact documentation, examiner observations, and defensible findings.
Network
TLS traffic analysis tool for extracting SNI, certificates, cipher suites, JA3-style fingerprints, and encrypted traffic clues useful during threat hunting and network forensics.
Threat Hunting
Investigation helper for extracting IPs, domains, hashes, URLs, and suspicious strings from reports and logs, then organizing them for enrichment and containment decisions.
Disk
Disk forensics practice focused on file system artifacts, browser traces, deleted-file clues, user activity, timestamps, and examiner notes for a final investigation report.
Incident Response
Timeline-first workflow that combines log entries, file timestamps, packet evidence, and analyst notes to reconstruct attack activity from detection through containment.
Response
Forensics
Forensics
Forensics
Logs
Detection
Evidence
Certification
TRYHACKME
Hands-on vulnerability scanning, exploitation, privilege escalation, and professional reporting knowledge that supports incident reconstruction and attacker-behavior analysis.
TRYHACKME
HTTP, DNS, web application architecture, and modern web behavior useful for web incident triage, log review, and network investigation.
TRYHACKME
Core security concepts, threat awareness, defensive controls, and practitioner fundamentals for SOC and DFIR learning.
TRYHACKME
Completed 24 cybersecurity challenges demonstrating consistent practice across investigation, analysis, and defensive security scenarios.
SECURITY BLUE TEAM
Foundational assessment methodology, scoping, and attacker perspective used to better understand intrusion paths during incident response.
RED TEAM LEADERS
Certified Threat Intelligence and Governance Analyst training focused on threat intelligence frameworks, governance, and structured analysis.
RED TEAM LEADERS
Certified Red Team Operations Management training that helps connect adversary simulation concepts to detection, response, and control validation.
APISEC UNIVERSITY
Certified API Security Analyst training covering API security testing, vulnerabilities, and best practices for web and API incident context.
APISEC UNIVERSITY
APISEC Certified Practitioner credential showing API security foundations, practitioner knowledge, and exam-based validation.
DFIR PORTFOLIO
Reports covering evidence acquisition, artifact review, findings, screenshots, and clear examiner conclusions.
TRYHACKME
Hands-on labs supporting SOC, DFIR, Windows, Linux, networking, and investigation fundamentals.
CERTIFICATION STUDY
Studying SOC alert triage, log analysis, SIEM workflows, incident response, and defensive investigation methods.
