---

👋 About Me

I break things to understand how to protect them.

I'm a cybersecurity fresher based in Pune, India — focused on SOC operations, threat detection, and ethical hacking. I don't just follow tutorials. I build real labs, write structured reports, and document my work — because the ability to communicate what you found matters as much as finding it.

🎯 Goal        →  Remote SOC Analyst or Junior Pentester role
🔭 Building    →  Expanding home SOC lab with more attack/detect scenarios
📚 Studying    →  CEH Master (in progress) + OSCP (in progress)
📍 Location    →  Pune, Maharashtra, India

---

🏅 Certifications

Certification	Issuer	Status
RHCSA — Red Hat Certified System Administrator	Red Hat	✅ Completed
RHCE — Red Hat Certified Engineer	Red Hat	✅ Completed
CCNA — Cisco Certified Network Associate	Cisco	✅ Completed
Cybersecurity Analyst Simulation	TCS / Forage	✅ Completed Apr 2026
Cybersecurity Job Simulation	Mastercard / Forage	✅ Completed Apr 2026
CEH Master — Certified Ethical Hacker	EC-Council	🔄 In Progress
OSCP — Offensive Security Certified Professional	OffSec	🔄 In Progress

---

🛠️ Tools & Skills

SIEM & Detection

Offensive Security

Cloud & Infrastructure

Scripting

---

🔍 Projects

🖥️ Project 1 — SOC Lab: Detecting Brute Force Attacks

Category: Threat Detection & SIEM | Difficulty: Intermediate

What I built: A home SOC lab ingesting 500+ log events/day from Windows and Linux endpoints. Configured Splunk with custom alert rules and dashboards. Detected 3 distinct brute-force attack patterns using log correlation across multiple sources.

What I proved: Real SIEM work isn't about the tool — it's about knowing what normal looks like so anomalies become obvious.

Detail	Value
Tools Used	Splunk, Wazuh, Kali Linux, DVWA
Events Monitored	500+ logs/day
Attacks Detected	3 brute-force patterns
Output	Custom dashboards + alert rules

📄 View SOC Lab Summary Report → 📁 View Lab Files →

---

🔓 Project 2 — Vulnerability Assessment Lab

Category: Penetration Testing & Hardening | Difficulty: Intermediate

What I built: A controlled attack environment using Kali Linux and Metasploitable VMs. Ran full network reconnaissance with Nmap, surfaced 15+ open ports, mapped findings to CVEs, and produced a structured Hardening Report with prioritized remediation steps.

What I proved: Scanning is easy. Documenting findings clearly enough for a security team to act on — that's the actual skill.

Detail	Value
Tools Used	Nmap, Metasploit, Kali Linux, Metasploitable
Open Ports Found	15+
CVEs Mapped	Multiple
Output	Structured Hardening Report

📄 View System Hardening Report → 📁 View Lab Files →

---

🎣 Project 3 — Phishing Simulation & Analysis

Category: Social Engineering & Threat Intelligence | Difficulty: Intermediate

What I built: Two complementary exercises:

1. Phishing Analysis — Investigated 10+ real phishing email samples. Extracted IOCs (malicious URLs, IPs, sender infrastructure) using VirusTotal and manual header analysis. Mapped TTPs to MITRE ATT&CK.
2. Phishing Simulation (Mastercard) — Designed a full phishing campaign, analyzed results by department vulnerability, and built a 5-slide security awareness training deck.

Detail	Value
Tools Used	GoPhish, VirusTotal, Email Header Analyzers
Samples Analyzed	10+ phishing emails
Framework	MITRE ATT&CK
Output	Threat Report + Awareness Training Deck

📄 View Threat Report → 📁 View Lab Files →

---

☁️ Project 4 — Cloud Security: Securing AWS S3 Buckets

Category: Cloud Security | Difficulty: Beginner–Intermediate

What I built: Explored common S3 misconfiguration vulnerabilities on AWS Free Tier. Identified public exposure risks, implemented bucket policies, configured access logging, and documented a remediation checklist for securing cloud storage.

Detail	Value
Tools Used	AWS S3, IAM, AWS CLI
Issues Found	Public access misconfigs, weak bucket policies
Output	Cloud Security Checklist

📁 View Lab Files →

---

🦠 Project 5 — LockBit Ransomware: Threat Intelligence Report

Category: Threat Intelligence | Difficulty: Research

What I built: A deep-dive threat intelligence report on LockBit ransomware covering the full attack lifecycle, TTPs mapped to MITRE ATT&CK, known IOCs, infrastructure patterns, and actionable defensive recommendations.

Detail	Value
Focus	LockBit ransomware group
Framework	MITRE ATT&CK
Output	Full threat intelligence report

📄 View LockBit Analysis Report →

---

📂 Repository Structure

Cybersecurity-Portfolio/
│
├── 📁 SOC-Lab/
│   ├── splunk-config/         # Alert rules, dashboard exports
│   ├── screenshots/           # Evidence of detections
│   └── README.md
│
├── 📁 Vulnerability-Assessment/
│   ├── nmap-scans/            # Raw scan outputs
│   ├── screenshots/           # Lab environment proof
│   └── README.md
│
├── 📁 Phishing-Simulation/
│   ├── email-samples/         # Sanitized phishing samples
│   ├── ioc-analysis/          # Extracted IOCs
│   └── README.md
│
├── 📁 Cloud-Security/
│   ├── aws-configs/           # Policy examples
│   └── README.md
│
└── 📁 Reports/
    ├── SOC-Summary.md
    ├── Hardening-Report.md
    ├── Phishing-Threat-Report.md
    └── LockBit-Threat-Report.md

---

📊 GitHub Activity

---

🗺️ Learning Roadmap

✅ Completed           🔄 In Progress         📅 Planned
──────────────────────────────────────────────────────────
✅ CCNA                🔄 CEH Master          📅 eJPT
✅ RHCSA               🔄 OSCP                📅 CompTIA Security+
✅ RHCE                🔄 Python scripting    📅 AWS Security Specialty
✅ Splunk basics       🔄 SOC lab expansion   📅 Blue Team Labs Online

---

📬 Contact

Actively looking for remote SOC Analyst or Junior Pentester roles. If you're working on real security problems, I want to hear from you.

 

---

_{Every project in this portfolio has a written report. Every report is something a real security team could act on.}