I build and investigate security systems with a focus on
SOC operations, detection engineering, DFIR, and AI security.
I got into cybersecurity through curiosity — first understanding how systems work, then learning how they break, how attacks leave traces, and how those traces can be turned into detections.
My work currently sits at the intersection of security operations, detection engineering, digital forensics, and AI-driven security automation.
I learn best by building labs, investigating attacks, writing detections, and automating the repetitive parts.
| Project | Focus |
|---|---|
| Cybersecurity Portfolio Website | Personal interactive portfolio showcasing security projects, writeups & technical labs |
| Phishing URL Detection ML | Machine learning model for detecting malicious and phishing URLs in real-time |
| AI Detection Engineering Assistant | AI-assisted Sigma, SPL & KQL detection generation |
| Enterprise Detection Engineering | Splunk BOTS v3 investigations & threat detection |
| Enterprise SIEM Lab | Splunk, Windows telemetry & security monitoring |
| SMB Attack Detection Lab | Sysmon, Windows Events & Wireshark investigation |
| DFIR Labs | Memory, disk & forensic investigations |
Explore all repositories → github.com/InsiyahBhatia