I'm a cybersecurity professional passionate about threat detection, incident response, and vulnerability management.
My work bridges hands-on technical labs, frameworks like MITRE ATT&CK® and NIST CSF, and continuous learning through real-world simulations and certifications.
- 🎯 Google Cybersecurity Professional Certificate
- 🔐 CompTIA Security+
- 🧩 ISC² Certified in Cybersecurity (CC)
- 🛡️ CompTIA CySA+ (Cybersecurity Analyst)
- 💻 THM SAL1 (TryHackMe Security Analyst Level 1)
Threat Detection · SIEM (Splunk / Elastic) · Network Analysis (Wireshark / Zeek)
Incident Response · Vulnerability Assessment (Nessus / Nmap)
Python Automation · Linux Administration · MITRE ATT&CK & NIST CSF Mapping
📁 Cybersecurity Portfolio – 12 Labs Repository
Hands-on cybersecurity portfolio covering:
- 12 labs mapped to MITRE ATT&CK® (Labs 1–7) and NIST CSF / SP 800-61 / SP 800-40 (Labs 8–12)
- Command walkthroughs, screenshots, and framework mappings
- Demonstrates practical skills in threat detection, analysis, and defense
-
📌 Vulnerability Management Program Implementation
Enterprise-style vulnerability lifecycle design including asset identification, risk scoring, remediation workflows, and reporting. -
📌 Programmatic Vulnerability Remediation (PowerShell / Bash)
Automation-driven remediation scripts for Windows and Linux environments aligned with security best practices.
-
📌 Threat Hunting Scenario – Tor Browser Detection
Structured hunting investigation focused on detecting anonymized traffic and suspicious browser usage using logs and network telemetry. -
📌 Threat Hunting Scenario – Port of Entry
Structured threat hunting investigation reconstructing a multi-stage endpoint compromise involving RDP initial access, malware staging, defense evasion, persistence, credential dumping, data exfiltration, and lateral movement using endpoint telemetry and KQL queries.
💬 “Cybersecurity is not just about defense — it’s about understanding the offense well enough to prevent it.”
— Sun Dimitri NFANDA
