Keshav Aggarwal

Analyzed web server access logs to identify unauthorized access during a simulated client breach, mapped findings to attack patterns, and produced a structured incident report.

Identified phishing email campaigns as a Security Awareness Team analyst, assessing spoofed domains, urgency tactics, and malicious links, then proposed improvements to employee training.

Completed multiple hands-on SOC investigation challenges on BTLO, analyzing real-world scenarios including malware triage, phishing analysis, and log-based threat hunting. Applied structured investigation methodology to collect evidence, identify indicators of compromise, and produce written findings.

Completed the full SOC Level 1 path, triaging SIEM alerts, analyzing Windows Event IDs 4624/4625/4688 to detect brute-force and unauthorized access, and documenting escalation decisions. Performed network packet analysis in Wireshark to identify C2 communication and anomalous DNS queries.

Built a home SOC environment using Splunk free tier on a Windows VM, ingesting live Windows Event Logs to simulate a real security monitoring setup. Authored 3 custom detection rules targeting brute-force attempts, privilege escalation, and unauthorized account access.

Investigated phishing alert end-to-end on the LetsDefend SOC simulator, analyzing email headers, examining suspicious URLs, correlating with endpoint logs, and closing the case with a full incident report. Practiced real SOC workflows including alert ownership, escalation decisions, and playbook-driven response.

Completed a Cybersecurity Analysis diploma program, including a capstone red team engagement.

Completed an IT Network Infrastructure diploma program.

Earned a Bachelor of Computer Applications degree.