Skip to content
View InsiyahBhatia's full-sized avatar
5 followers · 3 following

Achievements

Achievement: Pair Extraordinaire

Achievements

Achievement: Pair Extraordinaire

Block or report InsiyahBhatia

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
InsiyahBhatia/README.md

Security • Detection • Automation • AI

I build and investigate security systems with a focus on
SOC operations, detection engineering, DFIR, and AI security.


Insiyah Bhatia — Visual Cybersecurity Resume

About Me

I got into cybersecurity through curiosity — first understanding how systems work, then learning how they break, how attacks leave traces, and how those traces can be turned into detections.

My work currently sits at the intersection of security operations, detection engineering, digital forensics, and AI-driven security automation.

I learn best by building labs, investigating attacks, writing detections, and automating the repetitive parts.

Selected Work & Live Demos

Project Focus
Cybersecurity Portfolio Website Personal interactive portfolio showcasing security projects, writeups & technical labs
Phishing URL Detection ML Machine learning model for detecting malicious and phishing URLs in real-time
AI Detection Engineering Assistant AI-assisted Sigma, SPL & KQL detection generation
Enterprise Detection Engineering Splunk BOTS v3 investigations & threat detection
Enterprise SIEM Lab Splunk, Windows telemetry & security monitoring
SMB Attack Detection Lab Sysmon, Windows Events & Wireshark investigation
DFIR Labs Memory, disk & forensic investigations

Explore all repositories → github.com/InsiyahBhatia

Currently Exploring

Detection Engineering · Threat Hunting · DFIR · AI Security · Security Automation


"Every attack leaves a trace. Every trace tells a story."


Portfolio • LinkedIn • TryHackMe

Pinned Loading

  1. forward-active-directory-rbcd-lab forward-active-directory-rbcd-lab Public

    Active Directory attack simulation demonstrating LDAP/SMB enumeration, credential harvesting, lateral movement, Kerberos abuse, Resource-Based Constrained Delegation (RBCD), and Domain Administrato…

    4 1

  2. tryhackme-investigating-with-splunk tryhackme-investigating-with-splunk Public

    Investigated a simulated Windows security incident using Splunk Enterprise, SPL, PowerShell log analysis, and IOC extraction.

    2

  3. enterprise-siem-lab enterprise-siem-lab Public

    Hands-on enterprise SIEM lab built with Splunk Enterprise, Windows Server AD, and VirtualBox. Covers log ingestion, Windows Event ID analysis, SPL queries, and security dashboarding.

    3

  4. ai-detection-engineering-assistant ai-detection-engineering-assistant Public

    AI-powered Detection Engineering Assistant using n8n and Gemini to generate Sigma, Splunk, Sentinel, Elastic detection rules, MITRE ATT&CK mapping, and SOC investigation reports.

    2

  5. FullStack-Analytics-Platform FullStack-Analytics-Platform Public

    Analytics platform with automated ETL pipelines, machine learning models, real-time streaming, interactive dashboards, and a prediction API , all containerized with Docker.

    Python 1

  6. phishing-email-analyzer phishing-email-analyzer Public

    AI-powered phishing email analysis platform with SOC-grade React dashboard, n8n workflow, FastAPI parser, and PostgreSQL, upload a .eml file to get instant threat intel, MITRE ATT&CK mapping, and A…

    TypeScript 1