SIEM with Elasticsearch
I run an Elastic SIEM in my own lab, with agents on Linux, Windows and pfSense, collecting and searching their logs to learn detection hands-on.
cipher@127.0.0.1 ~ security · forensics · infrastructure
The investigation
Every investigation starts with raw data. Capture first, conclusions later.
Know what normal looks like, and the odd one out becomes obvious.
One byte where it shouldn’t be. That’s where the story starts.
Every theory gets tested against the evidence, never the other way round.
Wireshark, Burp Suite, Metasploit and a terminal. The right instrument for each layer.
Automate the repetitive, script the rest. Python and Bash do the heavy lifting.
Findings only matter when someone can act on them. Clear, reproducible, documented.
Have a system that needs a closer look? Let’s talk.
The IT Guy
I analyse malware and research security. I understand threats by taking them apart.
My foundation is IT infrastructure: networks, Linux and the systems everything runs on.
A budding programmer. I write Python, C and Bash to automate, analyse and build my own tools.
I'm pursuing an M.Tech in Cyber Forensics & Information Security. I'm never done learning.
Experience
I run an Elastic SIEM in my own lab, with agents on Linux, Windows and pfSense, collecting and searching their logs to learn detection hands-on.
Worked on an NIC security audit, and learned how government institutes operate from the inside.
Six months in the Department of Cyber Security and Cyber Forensics.
View certificateVolunteered on multiple cyber security campaigns.
Stage 01 · 2018
Mathematics, science and language at Saraswati Shishu Mandir, where the curiosity started.
Stage 02 · 2023
B.Tech in Information Technology at Government Engineering College: networks, systems and code.
Stage 03 · 2027 · In progress
M.Tech in Cyber Forensics & Information Security at NIELIT. The deep end, on purpose.
Questions, collaborations, or just want to talk security? Write to me. I read everything.
ciphersensei@proton.meCapture the flag
Five flags are hidden on this page. Find them all.