A collection of hands-on cybersecurity projects I have worked on covering Security Operations (SOC), Threat Intelligence, Malware Analysis, Detection Engineering, Offensive Security, and Vulnerability Assessment. These projects demonstrate practical experience in attack simulation, incident detection and response, threat hunting, malware analysis, vulnerability assessment, and defensive security. More to be added!!
-
Building a Real-World SOC: AI-Enhanced Honeypot Threat Intelligence & Automated Detection and Response Pipeline
Designed and implemented an end-to-end Security Operations Center (SOC) featuring a production honeypot, Splunk SIEM, AI-assisted alert triage, threat intelligence enrichment, and automated response workflows using n8n.
-
Investigating the RIG Exploit Kit Malware Campaign
Investigated a malware exploitation campaign using Kibana to identify malicious activity, Sguil to analyze network security alerts, and Wireshark to reconstruct attacker communications. Examined exploit artifacts to determine the infection chain, identify indicators of compromise (IOCs), and understand the attack's impact.
-
Windows RDP Brute Force Detection, Incident Response & System Hardening
Performed a Windows RDP brute force attack resulting in unauthorized access and privilege escalation through the creation of a new administrative user. Investigated authentication and security events in Splunk, reconstructed the attack timeline, and implemented security hardening measures to prevent future compromise.
-
Behind the Redirect: Uncovering a Multi-Year Phishing-to-Monetization Pipeline Leveraging Traffic Distribution Systems to Exploit User Trust and Opportunity
An in-depth threat intelligence report investigating a long-running phishing infrastructure that leveraged Traffic Distribution Systems (TDS) to redirect victims through multiple stages before monetization.
-
Zhujikdo Campaign: Multi-Stage Job Application Phishing Delivering zgRAT and PureHVNC via DLL Sideloading and Process Injection
Technical malware analysis documenting the infection chain, execution flow, persistence mechanisms, process injection techniques, and indicators of compromise (IOCs) associated with the Zhujikdo campaign.
-
Cisco Ethical Hacker Capstone Project: Four Capture-the-Flag (CTF) Challenges
Completed four Capture-the-Flag challenges demonstrating reconnaissance, vulnerability discovery, exploitation, privilege escalation, post-exploitation, and reporting skills.
-
ZoneMinder CCTV System: Vulnerability Assessment, Exploitation & Security Hardening
Conducted a comprehensive security assessment of the ZoneMinder surveillance platform, identifying and exploiting vulnerabilities before implementing defensive hardening measures and documenting remediation recommendations.