A cyber threat intelligence platform for threat and vulnerability analysis, investigations, testing, and mitigation
- Designed advanced penetration tests in order to generate training data and formulate IoC Patterns based on signatures seen in logs.
- Forked OpenCTI as interface to control ingestion, triage alerts and fine tune inference engine analysis.
- Wrote Ingestion system to run log / email imports at any interval with encryption in transit and at rest, supporting configs for data retention and shareability policies.
- Implemented deduplication and aggregation of Email data by maintaining checksum IDs on EML parts and its whole.
- Built Puppeteer crawler to ingest client websites and learn URL patterns & HTML semantics for additional training data and monitoring standards.
- Drafted all system Data Flow Diagrams for both architectural documentation and patent application.
- Wrote Docker containers and CI/CD pipeline from GitHub Actions to GCP.
