Abdulrahman Abdo

Through CyberDefenders, I investigated network intrusions and decrypted Cobalt Strike command-and-control traffic to recover beacon commands and exfiltrated data. I also reconstructed an attack chain in Wireshark, from port scanning through web-shell upload and payload staging.

In a multi-host investigation, I examined a compromised Tomcat web server and a linked Windows workstation. I used forensic artifacts to uncover a web shell, persistence mechanisms, log clearing, and ransomware deployment.

For an AWS cloud security investigation, I used VPC Flow Logs, CloudTrail, and GuardDuty to trace an intrusion to an application RCE vulnerability and identify the initial access vector. I also applied IAM least-privilege and S3 security hardening concepts during the assessment.

At Regal, where I work as a Customer Support Representative, I document client interactions and security-adjacent incidents, update internal databases, and coordinate incident response protocols. I completed the Computer and System Technician diploma program coursework at George Brown College and hold CCDL1, CompTIA Security+, and Google Cybersecurity Professional Certificate credentials.