Shivani Gautam

C-DAC

Mohali

12.2021 - Current

Worked on Security integrations, Python modules, data collection & data processing modules under the project 'Nationwide Rollout of honeypot threat capturing sensors'.
Integrated and configured malware analysis engines such as Snort, YARA, and Cuckoo Sandbox to detect and analyze potential threats
Utilized VirusTotal, AbuseIP-DB, and DB-IP for comprehensive analysis of collected data, including attacked IPs, MD5 hashes, and URLs, derived from honeypot log data.
Created parser modules in python to parse honeypot log files and store the meta data into relational databases and elastic search clusters
Implemented enrichment and correlation engines that ingested data into elastic search using the STIX 2.0 data model, enhancing data visibility and facilitating effective threat analysis
Regularly updated and fine-tuned Snort and YARA rule sets to adapt to evolving threat landscapes and improve the accuracy of intrusion detection.
Successfully worked on multiple security projects, leveraging expertise in project deployment and monitoring.
Implemented and deployed the project at remote sites, including Bangalore and Delhi, ensuring seamless implementation and functionality
Collaborated with cross-functional teams to gather project requirements and ensure successful implementation.
Implemented various RESTful APIs, enabling seamless integration and interaction with the developed systems and data repositories

Summary