Ananda Das

Network Traffic Analysis & Threat Detection (Wireshark)

• Built a controlled lab environment to capture and analyze live and simulated network traffic using Wireshark.
• Identified anomalies such as ARP spoofing, brute force attempts, and DNS tunneling.
• Created a structured report with attack indicators, packet evidence, and mitigation recommendations.
• Automated suspicious traffic detection using Wireshark filters and Python scripts

Network Recon & Vulnerability Analysis with Nmap (packet evidence in Wireshark)

• Performed controlled network reconnaissance and vulnerability analysis using Nmap; captured and analyzed scan traffic with Wireshark to validate findings and recommend mitigations.
• Conducted comprehensive network discovery and port scanning using Nmap (-sS, -p-, -T4), identifying open services across 200+ hosts in a controlled lab environment.
• Performed service/version detection and OS fingerprinting (-sV -O) and automated vulnerability checks using Nmap NSE scripts (script vuln) to surface high-confidence CVEs.
• Captured and analyzed all scan traffic with Wireshark, producing PCAP evidence that correlated Nmap probes with packet-level artifacts (SYN flags, retransmissions, banner strings).
• Built an automated pipeline to run Nmap scans, parse XML output, and generate CSV/HTML reports; integrated sample Python script to flag high-severity vulnerabilities for triage.
• Produced a formal incident-style report with packet screenshots, filter expressions, reproduction steps, impact assessment, and prioritized remediation steps.

Skills demonstrated
Nmap, NSE, Wireshark/tshark, TCP/IP, vulnerability assessment, packet forensics, Python scripting, report writing, responsible disclosure practices.