Shasi Kumar Anala

In my Enterprise SOC & Information Security Lab, I built and operated a security environment for monitoring, alert triage, incident investigation, and threat detection. I analyzed Windows, Active Directory, endpoint, firewall, and network telemetry using Microsoft Sentinel, Microsoft XDR, Splunk, and Elastic Security.

I developed KQL and SPL detection queries and investigated alerts by examining users, hosts, source IPs, authentication events, processes, and network connections. I also correlated SIEM and endpoint telemetry, investigated IOCs and attacker TTPs, and mapped suspicious activity to MITRE ATT&CK.

On SentinelPy, I developed a Python-based security log analysis platform for Windows Event Logs, Linux Syslog, and AWS CloudTrail. It supports log parsing, rule-based detection, event correlation, alert generation, investigation workflows, and automated security reporting.

As a MERN Stack Developer Intern at Varnarc Pvt. Ltd., I applied authentication, authorization, RBAC, input validation, and structured logging while developing REST APIs. I implemented JWT authentication and RBAC, and investigated application logs and security issues, documented findings, and followed remediation procedures.