Internship
I am a Cyber Security professional with 6 months of hands-on internship experience at Cyberhunt IT Solution. I successfully built an enterprise SOC lab using Splunk ES and developed detection rules that identified and mitigated 15 different attack vectors, including brute-force attempts and suspicious PowerShell activity. I'm building toward a Cybersecurity Engineer role, where I can leverage my strong technical and analytical skills to enhance security measures and protect critical systems.
Built an enterprise SOC lab using Splunk ES, Windows, Linux, and Sysmon, developing detection rules for brute-force attacks, suspicious PowerShell activity, privilege escalation, and malicious processes. Performed alert triage, log correlation, IOC analysis, threat hunting, MITRE ATT&CK mapping, and incident response, documenting root cause, containment, and remediation findings.
February 2026 – Current
Monitored 24/7 and investigated security alerts using Splunk Enterprise Security (ES) and Microsoft Defender for Endpoint and EDR/XDR(SentinelOne). Investigated phishing emails using Microsoft O365 Defender and performed email analysis. Analyzed Windows security alerts, including persistence, lateral movement, RDP, and LSASS memory access alerts. Investigated malicious process execution and suspicious PowerShell activities. Investigated password spray attacks by analyzing authentication logs and identifying affected user accounts. Investigated Kerberos-related attacks, including Kerberoasting and suspicious Kerberos authentication activity. Monitored and investigated Command and Control (C2) communication alerts. Investigated malware-related alerts and supported malware analysis. Analyzed firewall, proxy, IDS/IPS, and network security alerts. Reviewed endpoint and user activities to identify suspicious behavior. Validated indicators of compromise (IOCs) such as IP addresses, URLs, domains, file hashes, and processes. Investigated NTLM authentication attacks and suspicious NTLM logon events. Investigated Man-in-the-Middle (MITM) attack indicators and suspicious network communications. Investigated fileless malware attacks using process behavior, PowerShell activity, WMI, and command-line analysis. Investigated malicious process execution alerts by analyzing process trees, command-line arguments, network connections and parent-child relationships using EDR tools. Collaborated with security and IT teams for incident response and remediation. Followed incident response procedures to contain and resolve security incidents.
Master of Computer Application (MCA) • 08/2024 to 06/2026
8.3 (FCD)
Interested in collaboration or just want to say hello? Feel free to reach out!