Kanhay Thakore

I’m a CompTIA Security+-certified SOC Analyst with a postgraduate degree in Cyber Security Analysis and AI/ML. I bring hands-on experience in threat hunting, incident response, SIEM-driven log correlation, and MITRE ATT&CK-aligned investigations.

I’ve also built privacy-preserving AI workflows and Python automation to improve operational efficiency. In my Machine Learning Engineer Intern work, I developed a computer vision pipeline (YOLO-based) to detect and blur sensitive data, balancing detection accuracy with real-time performance and strong data anonymization principles.

On the SOC side, I architected a multi-OS SOC lab deploying Wazuh SIEM and Snort IDS for centralized monitoring and file integrity tracking. I simulated multiple attack scenarios and validated detections using Volatility memory forensics, with results focused on reliable, escalation-ready triage.

For DFIR and investigation work, I performed log-driven investigations using the ELK Stack across compromised hosts, reconstructing multi-stage timelines and mapping 20+ attacker behaviors to MITRE ATT&CK for actionable containment. I also validated web command injection by correlating request patterns with endpoint terminal history—then pivoted from IP reputation to isolation and prioritized IoCs for response.