Muhammed Dhanish

Cybersecurity Analyst with strong foundation in threat intelligence, incident response, and penetration testing. Skilled in security operations, vulnerability assessment, and threat hunting. Proficient in using security tools such as Splunk, Wireshark, Nessus, Metasploit, Burp Suite, and EDR solutions. Hands-on experience with SIEM platforms, IDS/IPS, firewalls, and malware analysis tools. Adept at analyzing attack patterns, mitigating risks, and strengthening security defenses. Passionate about cybersecurity with a continuous learning mindset to stay ahead of evolving threats.

SiEM tools: Splunk, ELK 

VAPT tools: Nmap, Kali linux, Nessus, OpenVAS, Wireshark, Metasploit Framework, Burp Suite, Nikto, Firewall, IPS, IDS

Open source tools: OWASP, OSINT, Google Dorks

Analysis: Threat Hunting, Malware and Phishing analysis, Network analysis

1. Splunk Configuration for Security Monitoring

• Configured and optimized Splunk SIEM for log collection, indexing, and security event monitoring.
• Developed custom dashboards, alerts, and reports to detect security threats and anomalies.
• Integrated various data sources, including firewalls, endpoint security tools, and network logs.
• Implemented correlation rules to enhance threat detection and incident response capabilities.

2. Snort Intrusion Detection System (IDS) Configuration on Windows Description:

• Developed and configured Snort, an open-source Intrusion Detection System (IDS), on a Windows platform to monitor and analyze network traffic.The project involved setting up Snort from scratch, creating custom rules tailored to specific attack vectors, and generating actionable alerts based on network anomalies.

Key Responsibilities:

• Installed and configured Snort, ensuring all dependencies were correctly set up.
• Created and implemented custom detection rules for identifying security threats.
• Documented the installation process, configuration steps, and analytical findings for future reference.

Skills Acquired:

• Snort configuration
• Rule creation and implementation
• Network traffic analysis
• Technical documentation

Technologies Used:

• Snort, WinPcap, Windows