Monitoring Systems & Hands-on Labs

Metadata Analysis

Explore your Facebook or Instagram export: search activity, connections, reactions and timelines. Your data stays in your browser.

Enterprise SIEM Homelab with Elastic Stack & Sysmon

Built a Homelab to monitor a Windows Enterprise environment. Integrated Sysmon to analyze malicious processes and map alerts to the MITRE ATT&CK framework.

Automated IP & Hash Triage SOAR Pipeline

Developed a Python tool that queries VirusTotal, AbuseIPDB, and AlienVault OTX when SIEM detects high-risk alerts, then sends detailed notifications through Telegram / Discord Webhooks.

Ransomware Memory & Disk Artifact Forensics

Investigated a Ransomware-infected memory image (RAM dump) with Volatility 3. Recovered process injection, decoded the payload, and wrote YARA rules to detect similar variants.

Wireshark Network Traffic Analysis & C2 Detection

Analyzed a PCAP containing Command & Control (C2) activity through DNS Tunneling and a Cobalt Strike Beacon. Created Snort rules to block anomalous traffic.