Cybersecurity Analyst | CYSA+ | Security+ Certified | Splunk Core Certified Power User | ISC2 CC | Google Certified | @ Log(N) Pacific
- 🔐 Cybersecurity analyst with hands-on expertise in threat hunting, SIEM detections, KQL scripting, and automated vulnerability remediation
- ⚙️ Knowledge on PowerShell & BASH security hardening tools aligned with STIG & CVE benchmarks
- 📈 Proven ability to simulate and detect real-world threats using Microsoft Sentinel and MITRE ATT&CK framework
- 🎯 Seeking roles in SOC Operations, Threat Detection, Vulnerability Management, or Blue Team Automation
- 🎓 Master’s in Cybersecurity Candidate @ WGU
- 🔐 Key Focus Areas:
- Secure Network Design
- Security Operations (SIEM | Incident Response)
- Penetration Testing & Vulnerability Assessment
- Cloud Security
- Risk Management & Security Architecture
- 🏆 Industry Certifications: PenTest+ | CISM | CISSP | (in progress) 🏆
- 🛡️ Passionate about architecting secure systems, ethical hacking, and implementing modern defense strategies in real-world scenarios.
- 📊 Microsoft Sentinel Engineering: Developed custom detection rule packs for brute-force, C2, persistence tactics
- 🛡 Vulnerability Management Lead (Lab Sim): Created a structured remediation workflow using PowerShell
- 🕵️♂️ Threat Hunting: Investigated anomalies in Tor browser traffic, RDP brute force attempts, and internal abuse cases
- 📘 Incident Response Playbooks: Authored step-by-step guides to reduce analyst guesswork and accelerate triage
 |
 |
 |
- 🔐 Vulnerability Management Program (Full Cycle)
- 🛍️ Targeted Vulnerability Assessment for E-commerce Operations
- 🍯SOC_and_Honeypot_in_Azure_Live_Traffic
- 🧠 Threat Hunt: Tor Browser Scenario
- 🔍 Brute Force Threat Detection (Sentinel)
- 🔍Threat_Hunting_Incident_Data_Exfiltration_Employee_Simulation
- 📏 Sentinel Rule Packs (MITRE Mapped)
-
Participated in a real-world scenario-based Capture The Flag (CTF) focused on privilege escalation, enumeration, and log analysis.
Demonstrated strong analytical skills by identifying initial access vectors, misconfigured admin settings, and exploiting hidden credentials.Tools used: Browser-based reconnaissance, log forensics, Azure Sentinel, KQL Queries.
Outcome: Successfully captured all flags and documented each step with detailed reasoning and remediation suggestions.
-
🕵️ Threat Hunt: Operation Deep Access
Conducted a structured threat hunt simulating advanced persistent threats (APT) using Microsoft Defender for Endpoint and Sentinel. Identified stealthy attacker behaviors including PowerShell-based persistence, WMI event triggers, credential dumping, lateral movement, and C2 communication.
Tools used: Microsoft Sentinel, Defender for Endpoint (MDE), KQL Queries, Event Log Analysis, Azure VM.
Outcome: Mapped attacker activity to MITRE ATT&CK framework, generated forensic timeline, and proposed a detailed incident response plan with containment, eradication, and hardening strategies. Delivered a complete GitHub markdown report with TTP analysis and recommendations.
| Area | Tools / Skills Used | Key Outcome |
|---|---|---|
| Vulnerability Remediation | PowerShell, BASH, STIG, CVE, Compliance | Hardened OS + Automated Patch Scripts |
| Threat Detection | Microsoft Sentinel, KQL, MDE | Detected Brute Force, RDP, C2 Scenarios |
| Security Automation | YAML Rules, Playbooks, Incident Mapping | Enabled Low-Latency SOC Responses |
| Blue Team Engineering | MITRE ATT&CK, KQL Dashboards | Built Resilient Analyst View Layers |
- ✅ CompTIA CYSA+
- ✅ CompTIA Security+
- ✅ ISC2 CC
- ✅ Google Cybersecurity Professional Certificate
- ✅ Splunk Certified Core Power User
- 🛡 SIEM Tuning, Blue Team Automation, IR Playbooks
- 🧠 Regular lab practice in offensive/defensive strategy simulation
- 💡 SOC Playbooks Library with Real Case Studies
- 🛡️Email Security Simulation Project
- 🔍Simulated_USB_Data_Exfiltration_Insider_Threat
- 📊 Splunk Setup and Device Log Ingestion- Building a Dashboard
- 🔄 Patch Automation via PowerShell (Labs)
- 🔧 Advanced STIG Compliance Scripts
- 🛡️ Incident Response For Everyone
- 🧠 PASTA Threat Model Worksheet
- 💼 NIST Frameworks for SOC Analysts
- 🛡️📊🔟OWASP-TOP_10_2025- UnOfficial Yet
- 📄 Full Cybersecurity Incident After Action Reports (AARs)
- 🕵️♂️SOC Simulations - Try Hack Me
- 📄Python Scripts for Threat Detection Scenarios
- 📘 Splunk Notes
- 📘 CCNA Notes
- 📚 CCNA Practice Sets
- 📧 Email: vbdevhex0@gmail.com
- 💼 LinkedIn: vbd91
- 💻 GitHub: Bharathkasyap
Why does the blue team always bring snacks to SIEM meetings? Because with all those logs, someone's gotta serve the cookies, and analyze who stole them.
© 2025 Venkata Devulapalli — Cybersecurity in Action.