SOC Analyst fresher from Mumbai, India building real hands-on skills in Blue Team operations, phishing investigation, and detection engineering.

I learn by building real labs — every project here was built in an actual virtual environment, not copied from tutorials.

• 🎓 BSc IT — 9.70 CGPA
• 🏅 CEHv13 AI — EC-Council
• 🏅 eNPT — EncryptECL Cyberguard
• 💼 Cloud Security Intern — iFuture Technologies Pvt. Ltd.
• 🤖 Using AI as a force multiplier in SOC investigations
• 🎯 Targeting SOC L1/L2 roles — Mumbai · Navi Mumbai · Thane

Investigation & Analysis Email Forensics Phishing Investigation Log Analysis IOC Extraction Threat Intelligence PCAP Analysis

Frameworks & Standards MITRE ATT&CK Sigma Rules Incident Response SPF / DKIM / DMARC ISO 27001 RBAC

Tools Wireshark Sysmon Splunk VirusTotal hMailServer Kali Linux Windows Server 2022

Phishing attack simulation → end-to-end SOC investigation

Built a complete lab: Kali Linux attacker + Windows Server 2022 victim + hMailServer + DNS + Sysmon + Wireshark. Simulated phishing using swaks, investigated raw email headers, configured SPF/DKIM/DMARC, wrote Sigma rules, mapped to MITRE ATT&CK T1566.002, and produced an enterprise SOC Incident Report. Includes AI-assisted investigation workflow.

Wireshark Sysmon DNS Sigma MITRE ATT&CK Email Forensics

Brute-force attack simulation → Splunk detection engineering

Simulated RDP brute-force attack, ingested Windows Security Event logs into Splunk, built detection SPL queries, and mapped to MITRE ATT&CK T1110.001.

Splunk SPL Windows Event Logs MITRE ATT&CK Detection Engineering