My Background

Experienced CYSA+, CCFE Certified security professional specializing in incident investigations, and mitigation. Proven ability to lead complex security incident investigations, analyse and interpret data to evaluate breaches, and communicate technical findings effectively to senior-level audiences. Proficient in conducting investigations and providing comprehensive solutions to restore trust and protect client assets.

​

​

With Multi Tools experience:

EDR/MDR     : - Sentinel One(MDR), Qualys EDR, MDFE, Carbon Black
XDR              : - Bit Defender, CrowdStrike (Falcon).

CDR              : -  Obsidian

SIEM              : -  Microsoft Sentinel (IR Purposes), Panther

Email EDR     :-  Sublime Security, Petra Security
Log Analysis  : - Chainsaw, Hayabusa, LogParser, EvtxECmd.
DFIR              : - Velociraptor, Redline, FTK Imager, Cyber triage, OS Forensics, Magnet Axiom, Belkasoft

Memory Analysis   :- Volatility 3, WinPmem, MemProc5

File Recovery  :- Photorec                                                                                             

Eric Zimmerman :-  Kape, AmcacheParser, ShimCache parser, JLECmd, LECmd, SBECmd, Registry Explorer (All tools)

TimeLine creation  :- MFTECmd, Log2Timeline (Plaso)

MS365 Analysis  :- Microsoft extractor suite, Analyzer suite