At Thiranex, I developed and tested a Python-based vulnerability scanner and secure authentication system during a project-based cybersecurity internship. I also performed network traffic analysis and vulnerability assessment.
In my Core Detection Lab, I deployed an Active Directory environment and forwarded Windows Event Log and Sysmon telemetry to Splunk Enterprise. I simulated a password-spray attack and wrote SPL detection logic to correlate failed logons across users and source IPs.
I also built a scheduled Splunk alert and SOC dashboard to track authentication activity. In my Home SOC Lab, I simulated SSH brute-force attacks and used Wazuh to correlate authentication failures with MITRE ATT&CK techniques.
