๐ฆ๐ข๐ & ๐๐น๐๐ฒ ๐ง๐ฒ๐ฎ๐บ ๐๐ป๐๐ต๐๐๐ถ๐ฎ๐๐ | ๐๐ฒdication in Blue team field
Building practical cybersecurity projects focused on Threat Detection, Security Operations (SOC), Malware Analysis, and Detection Engineering.
ย
I am a Computer Science & Engineering Graduate (2026) and dedicated Cybersecurity & SOC Analyst focused on defensive security, SIEM log analysis, and incident response.
- ๐ ๐ช๐ต๐ฎ๐ ๐ ๐๐ฎ๐๐ฒ ๐๐ผ๐ป๐ฒ โ Earned Google Cybersecurity & NPTEL Elite Ethical Hacking (60%, IIT Kharagpur) credentials. Awarded Best Performer at Elevate Labs (Skill India) and built multi-OS Wazuh & Sysmon detection labs.
- โก ๐ช๐ต๐ฎ๐ ๐ ๐๐บ ๐๐ผ๐ถ๐ป๐ด ๐๐๐ฟ๐ฟ๐ฒ๐ป๐๐น๐ โ Practicing alert triage and incident response on TryHackMe, Hack The Box, and LetsDefend. Writing Python security automation scripts and developing Sigma & YARA detection rules.
- ๐ฏ ๐ช๐ต๐ฎ๐ ๐๐ ๐ ๐ ๐๐๐๐๐ฟ๐ฒ ๐๐ผ๐ฎ๐น โ Targeting Tier-1/Tier-2 SOC Analyst and Security Engineer roles in enterprise defense. Preparing for CompTIA Security+,and BTL1 certifications to advance in detection engineering.
โ 
|
End-to-end virtual SOC telemetry environment utilizing Wazuh Manager on Ubuntu Server to monitor Windows 11 endpoint telemetry and Sysmon event logs against simulated MITRE ATT&CK tactics.
๐ ๏ธ Tools:ย
๐ Repository: github.com/NATTOMR/Design-and-Implementation-of-a-Wazuh-Based-SOC-Home-Lab-for-Attack-Detection-and-Log-Analysis |
|
Real-time SOC monitoring lab simulating and correlating brute-force authentication attempts from Kali Linux against an Ubuntu victim using Splunk Enterprise and custom geo-IP dashboards.
๐ ๏ธ Tools:ย
๐ Repository: github.com/NATTOMR/Linux-SSH-Attack-Monitoring-Splunk-SIEM-Lab |
|
Machine-learning-driven mobile security system automating APK static reverse engineering via Androguard and XGBoost / Random Forest classification with >95% benchmark accuracy.
๐ ๏ธ Tools:ย
๐ Repository: github.com/NATTOMR/Android-Malware-Detector--My-Final-Year-Project-2026- |
|
Hands-on cloud security laboratory covering AWS security, IAM policies, cloud detection, Microsoft Sentinel, cloud SOC architecture, threat hunting, and incident response.
๐ ๏ธ Tools:ย
๐ Repository: github.com/NATTOMR/cloud-security-lab |
๐ ๐๐ต๐ฒ๐ฐ๐ธ ๐ผ๐๐ ๐บ๐ ๐ฝ๐ถ๐ป๐ป๐ฒ๐ฑ ๐ฟ๐ฒ๐ฝ๐ผ๐๐ถ๐๐ผ๐ฟ๐ถ๐ฒ๐ ๐ฎ๐ฏ๐ผ๐๐ฒ ๐ณ๐ผ๐ฟ ๐ณ๐๐น๐น ๐ฝ๐ฟ๐ผ๐ท๐ฒ๐ฐ๐ ๐ฑ๐ผ๐ฐ๐๐บ๐ฒ๐ป๐๐ฎ๐๐ถ๐ผ๐ป, ๐น๐ฎ๐ฏ ๐ฎ๐ฟ๐ฐ๐ต๐ถ๐๐ฒ๐ฐ๐๐๐ฟ๐ฒ, ๐ฎ๐ป๐ฑ ๐๐ผ๐๐ฟ๐ฐ๐ฒ ๐ฐ๐ผ๐ฑ๐ฒ!
๐ก๏ธ ๐ฆ๐ฒ๐ฐ๐๐ฟ๐ถ๐๐ & ๐ง๐ฒ๐ฐ๐ต๐ป๐ถ๐ฐ๐ฎ๐น ๐ง๐ผ๐ผ๐น๐ธ๐ถ๐
| ๐ก๏ธ SIEM & SOC |
|
||||||||||||||
| โ๏ธ Cloud Security |
|
||||||||||||||
| ๐ Network Security |
|
||||||||||||||
| ๐ฏ Web Security |
|
||||||||||||||
| ๐ Threat Detection & Intel |
|
||||||||||||||
| ๐ฅ๏ธ Operating Systems |
|
||||||||||||||
| ๐ป Web Tools & DevOps |
|
A comprehensive overview of my open-source contributions, language distribution, and daily development activity.
๐ ๐๐ผ๐ป๐๐ฟ๐ถ๐ฏ๐๐๐ถ๐ผ๐ป ๐๐ฟ๐ฎ๐ฝ๐ต ๐๐ป๐ถ๐บ๐ฎ๐๐ถ๐ผ๐ป
|
๐ก๏ธ ๐๐น๐๐ฒ ๐ง๐ฒ๐ฎ๐บ ๐ข๐ฝ๐ฒ๐ฟ๐ฎ๐๐ถ๐ผ๐ป๐
๐ฏ ๐ง๐ต๐ฟ๐ฒ๐ฎ๐ ๐๐๐ป๐๐ถ๐ป๐ด ย โขย โก ๐๐ฒ๐๐ฒ๐ฐ๐๐ถ๐ผ๐ป ๐๐ป๐ด๐ถ๐ป๐ฒ๐ฒ๐ฟ๐ถ๐ป๐ด ย โขย ๐ ๐ฆ๐ข๐ ๐ช๐ผ๐ฟ๐ธ๐ณ๐น๐ผ๐๐ & ๐ฃ๐น๐ฎ๐๐ฏ๐ผ๐ผ๐ธ๐ ย โขย ๐จ ๐๐ป๐ฐ๐ถ๐ฑ๐ฒ๐ป๐ ๐ฅ๐ฒ๐๐ฝ๐ผ๐ป๐๐ฒ |
|
๐ฌ ๐ ๐ฎ๐น๐๐ฎ๐ฟ๐ฒ ๐ฅ๐ฒ๐๐ฒ๐ฎ๐ฟ๐ฐ๐ต
๐ฌ ๐ฅ๐ฒ๐๐ฒ๐ฟ๐๐ฒ ๐๐ป๐ด๐ถ๐ป๐ฒ๐ฒ๐ฟ๐ถ๐ป๐ด ย โขย ๐ ๐ฆ๐๐ฎ๐๐ถ๐ฐ & ๐๐๐ป๐ฎ๐บ๐ถ๐ฐ ๐๐ป๐ฎ๐น๐๐๐ถ๐ ย โขย ๐ป ๐๐ถ๐ป๐ฎ๐ฟ๐ ๐๐ป๐ฎ๐น๐๐๐ถ๐ ย โขย ๐งฌ ๐ ๐ฎ๐น๐๐ฎ๐ฟ๐ฒ ๐๐ฒ๐ต๐ฎ๐๐ถ๐ผ๐ฟ ๐ฃ๐ฟ๐ผ๐ณ๐ถ๐น๐ถ๐ป๐ด |
|
โ๏ธ ๐๐น๐ผ๐๐ฑ ๐ฆ๐ฒ๐ฐ๐๐ฟ๐ถ๐๐
โ๏ธ ๐๐ช๐ฆ ๐ฆ๐ฒ๐ฐ๐๐ฟ๐ถ๐๐ ๐๐๐ป๐ฑ๐ฎ๐บ๐ฒ๐ป๐๐ฎ๐น๐ ย โขย ๐ ๐๐น๐ผ๐๐ฑ ๐๐๐ ๐ฆ๐ฒ๐ฐ๐๐ฟ๐ถ๐๐ ย โขย ๐ ๐๐น๐ผ๐๐ฑ ๐๐ผ๐ด๐ด๐ถ๐ป๐ด & ๐๐ฒ๐๐ฒ๐ฐ๐๐ถ๐ผ๐ป |
- โ ๐ช๐ฎ๐๐๐ต ๐ฆ๐ข๐ ๐๐ผ๐บ๐ฒ ๐๐ฎ๐ฏ โ Implemented SIEM server, client log monitoring, and active response rule triggers.
- โ ๐๐ป๐ฑ๐ฟ๐ผ๐ถ๐ฑ ๐ ๐ฎ๐น๐๐ฎ๐ฟ๐ฒ ๐๐น๐ฎ๐๐๐ถ๐ณ๐ถ๐ฒ๐ฟ โ Engineered static analysis parser and machine learning classification pipeline.
- โก ๐๐ฒ๐๐ฒ๐ฐ๐๐ถ๐ผ๐ป ๐๐ป๐ด๐ถ๐ป๐ฒ๐ฒ๐ฟ๐ถ๐ป๐ด โ In Progress: Writing custom Sigma rules and Snort/Suricata signatures for common network/system exploits.
- โก ๐ง๐ต๐ฟ๐ฒ๐ฎ๐ ๐๐๐ป๐๐ถ๐ป๐ด โ In Progress: Analyzing artifact behavior using Sysmon logs, Event Viewer, and memory dumps.
- โก ๐๐น๐ผ๐๐ฑ ๐ฆ๐ฒ๐ฐ๐๐ฟ๐ถ๐๐ ๐๐ฎ๐ฏ โ In Progress: Hands-on AWS security, IAM, CloudTrail/CloudWatch logging, and Microsoft Sentinel detection. ย
- ๐ฏ ๐๐ป๐๐ฟ๐-๐๐ฒ๐๐ฒ๐น ๐ฆ๐ข๐ ๐ฅ๐ผ๐น๐ฒ โ Target: Secure an internship or associate SOC Analyst position to contribute to defensive security.
- ๐ก๏ธ ๐ฆ๐๐๐ & ๐ ๐ผ๐ป๐ถ๐๐ผ๐ฟ๐ถ๐ป๐ด โ Log aggregation, rule customisation, dashboard creation (Wazuh, Splunk).
- ๐ ๐ง๐ต๐ฟ๐ฒ๐ฎ๐ ๐๐ป๐ฎ๐น๐๐๐ถ๐ & ๐๐ฒ๐๐ฒ๐ฐ๐๐ถ๐ผ๐ป โ Sigma rule mapping, MITRE ATT&CK mapping, endpoint visibility.
- ๐ ๐ก๐ฒ๐๐๐ผ๐ฟ๐ธ ๐ฆ๐ฒ๐ฐ๐๐ฟ๐ถ๐๐ โ Traffic capture, packet analysis, Intrusion Detection Systems (Wireshark, Suricata).
- ๐ฌ ๐ ๐ฎ๐น๐๐ฎ๐ฟ๐ฒ ๐๐ป๐ฎ๐น๐๐๐ถ๐ โ Static APK unpacking, code pattern identification, ML behavior models.
- โ๏ธ ๐๐น๐ผ๐๐ฑ ๐ฆ๐ฒ๐ฐ๐๐ฟ๐ถ๐๐ (๐๐ฒ๐ฎ๐ฟ๐ป๐ถ๐ป๐ด & ๐๐ฎ๐ฏ๐) โ AWS (IAM, CloudTrail, CloudWatch), Microsoft Sentinel, KQL, cloud threat detection & Cloud SOC architecture.
- ๐ฅ๏ธ ๐ฆ๐๐๐๐ฒ๐บ๐ ๐๐ฑ๐บ๐ถ๐ป๐ถ๐๐๐ฟ๐ฎ๐๐ถ๐ผ๐ป โ Linux terminal operations, bash automation, Windows server basic configuration.
โญ ๐ง๐ต๐ฎ๐ป๐ธ ๐๐ผ๐ ๐ณ๐ผ๐ฟ ๐๐ถ๐๐ถ๐๐ถ๐ป๐ด ๐บ๐ ๐ฝ๐ฟ๐ผ๐ณ๐ถ๐น๐ฒ! ๐๐ณ ๐๐ผ๐ ๐น๐ถ๐ธ๐ฒ ๐บ๐ ๐๐ผ๐ฟ๐ธ, ๐ฐ๐ผ๐ป๐๐ถ๐ฑ๐ฒ๐ฟ ๐๐๐ฎ๐ฟ๐ฟ๐ถ๐ป๐ด ๐บ๐ ๐ฟ๐ฒ๐ฝ๐ผ๐๐ถ๐๐ผ๐ฟ๐ถ๐ฒ๐.