Cybersecurity Engineering Student | Blue Team | DFIR | Detection Engineering
Portfolio · LinkedIn · GitHub · Email
======================================================================
BLUE TEAM | DFIR | CYBER THREAT INTELLIGENCE | DETECTION ENGINEERING
======================================================================
- Cybersecurity engineering student at ESIEA, building a profile around vulnerability analysis, defensive tooling and security automation.
- Cyber Threat Intelligence Analyst at ******, working on digital evidence, suspicious infrastructure, IOC enrichment and structured reporting.
- Hands-on experience with Windows, Linux, Active Directory, Microsoft 365, SIEM deployment and incident triage.
- Seeking a 36-month cybersecurity apprenticeship with a 2 weeks company / 2 weeks school schedule in France.
Offline Windows and Active Directory investigation toolkit with a CLI and local web interface.
- EVTX, JSON, CSV, CEF, XML, Syslog and ZIP ingestion
- deterministic detections and correlations
- timeline reconstruction, attack-path analysis and exposure scoring
- HTML, JSON, CSV, ATT&CK Navigator and Mermaid exports
Python EVTX FastAPI MITRE ATT&CK DFIR
Open-source local anti-infostealer hardening tool for Linux and Windows.
- synchronous Linux pre-read protection with
fanotify - explainable ALLOW / DENY decisions and local evidence logs
- Windows observe and hardening backend with reversible controls
- Safe Capture Demo, rollback workflow, CI gates and packaged V1.0.0 release
Python Bash PowerShell Linux Windows systemd
Personal deployment and defensive monitoring guide built around Orange Cyberdefense's GOAD-Light lab.
- vulnerable Active Directory environment
- Windows and Sysmon log collection with Wazuh
- Suricata network visibility
- controlled attack scenarios for detection validation and investigation practice
Active Directory Wazuh Sysmon Suricata Ansible VirtualBox
- Detection and investigation: SIEM, EDR, Sysmon, Sigma, MITRE ATT&CK, EVTX, IOC analysis
- Infrastructure: Active Directory, Windows Server, Linux, Microsoft 365, Entra ID, Docker, Ansible
- Network and reconnaissance: TCP/IP, DNS, Wireshark, Nmap, Shodan, Suricata, Zeek
- Security platforms: Splunk, Wazuh, Elastic, OpenCTI
- Active Directory forensics and attack-path reconstruction
- SOC investigation and SIEM workflows
- Detection engineering and rule quality
- Local endpoint hardening and anti-infostealer research
- CTI, IOC enrichment and incident reporting
- Cisco CyberOps: SOC Operations
- NIST Cybersecurity Framework 2.0
- CyberDefenders