top of page
Cybersecurity Projects
From automating incident response to building robust detection workflows, these projects represent the intersection of security engineering and practical solutions. Dive in to see how I’ve tackled real-world security challenges with a mix of innovation and hands-on engineering.
PDFreak AI
Explainable PDF Malware Detection
An AI-powered system for detecting malicious PDF documents using static and dynamic analysis.
The pipeline combines feature extraction from tools such as pdfid, pdf-parser, and Ghidra with a Random Forest baseline (83.1% accuracy). Verdicts are enriched using RAG-based MITRE ATT&CK mapping to provide explainable, analyst-friendly results. The system is exposed via a FastAPI service.
Automated Incident Response & Device Isolation
Integrating SOAR workflows to contain and remediate threats in real-time.
This project showcases how I built automated incident response workflows that rapidly contain threats and isolate compromised devices. Using Microsoft Sentinel and Defender in a cloud environment, I designed a series of Logic Apps that automate critical incident response tasks, from isolating devices and revoking user sessions to performing password resets and blocking malicious IOCs.
In addition to device isolation, I implemented automated enrichment processes that use VirusTotal to scan network IOCs, and orchestrated phishing analysis flows that integrate third-party threat intelligence for faster triage and response.
STILL WORKING ON THE SITE
bottom of page