Information Security Graduate from Ural Federal University (UrFU)
Focused on Junior SOC / Blue Team and DFIR.
Interested in security monitoring, event and log analysis, incident triage, threat analysis, and incident investigation.
Languages: 🇪🇬 Arabic (Native) · 🇷🇺 Russian (B2) · 🇬🇧 English (B1)
| SOC | SIEM | DFIR | Threat Analysis |
|---|---|---|---|
| Event Analysis | Wazuh / ELK | Digital Artifacts | IOC |
| Log Analysis | Parsing | Incident Investigation | MITRE ATT&CK |
| Incident Triage | Normalization | Evidence Integrity | Cyber Kill Chain |
| TP / FP | Search | Documentation | TI / TH |
Automated workstation prototype for information security incident investigations.
- Collection and analysis of Windows digital artifacts
- Artifact integrity verification using SHA-256
- Case management
- Investigation activity logging
- HTML / PDF reporting
- Malware Infection investigation scenario
Stack: C# .NET 8 WinForms SQLite JSON SHA-256 QuestPDF
Practical wireless network planning and Site Survey using Ekahau AI Pro.
- Coverage analysis
- Capacity planning
- Access Point placement
- Wireless network assessment
🖥️ SIEM & Logging
🌐 Network Security
💻 Operating Systems & Administration
🔐 Security Tools
🐍 Programming & Automation
🛡️ SOC / SIEM
- Event search and analysis
- Log parsing
- Log normalization
- Elasticsearch
- Logstash
- Wazuh
- Dashboard analysis
- Basic correlation workflows
🍯 Honeypot / Deception
- Attacker traffic collection
- HTTP request analysis
- Authentication attempt analysis
- Suspicious activity analysis
- Log review in an isolated environment
- Basic Python / Flask components
🕵️ DFIR
- Digital artifact collection
- Windows artifact analysis
- Memory dump analysis
- Incident investigation
- Evidence integrity
- Investigation documentation
🌐 Network Security
- IDS / IPS configuration
- Detection rule practice
- Network scanning
- Log export to SIEM
- Network protocol analysis
- ICMP tunneling lab
🔐 Hardening & Vulnerability Management
- CIS-style hardening
- Windows security configuration
- Ansible automation
- Nessus vulnerability scanning
- Vulnerability remediation
🌐 Web Application Security
- OWASP-based testing
- Burp Suite
- SQL Injection analysis
- Web application vulnerability assessment
View Activities
- AlfaCTF 2025
- AlfaCTF 2026
- IX Кубок CTF России
- UralCTF
- Хакатон Т1
- КИБЕРБИТВА
- 2026 ICPC Ural
- КОД ИБ
- Киберучения УрФУ
- Buddy System — UrFU
- Arab Students Community — UrFU
Bachelor's Degree — Information Security
2022 — 2026
10.03.01 — «Информационная безопасность»
Thesis
Automated Workstation for Information Security Incident Investigation
Development of TRACE, a prototype for collecting and analyzing Windows digital artifacts during DFIR investigations.
My practical learning path covers:
SOC · SIEM · DFIR · Threat Intelligence · Threat Hunting
Network Security · Windows Security · Linux · Web Security
Vulnerability Management · System Hardening
Observe. Analyze. Investigate. Improve.