At SHUM, I conduct OSINT analysis across the open web and social media to monitor nation-state actors and cyber operations linked to regional conflict. I produce INTSUM- and SITREP-style analysis, mapping adversary behavior to MITRE ATT&CK and Cyber Kill Chain models.
At Aguna Solutions, I collected OSINT indicators and fed them into SOC detection workflows. I mapped adversary TTPs, triaged SIEM alerts, and enriched IOCs to support investigations and response.
I also authored intelligence reports for leadership and SOC teams, and validated malicious activity during incident response investigations alongside the IR team.
My projects include a Python system tracking 35+ APT groups across 30 OSINT sources, a vulnerability intelligence monitor, and an in-progress effort to automate CTI workflows with agentic AI. I’m advancing open-source tracking of nation-state threats and building security automation.
