Cybersecurity Portfolio

This repository demonstrates practical cybersecurity projects focused on threat detection, SIEM monitoring, and incident analysis.

Projects

🔹 SOC Lab – Microsoft Sentinel

• Detected brute-force attacks using KQL queries
• Analyzed Windows Security Event logs (Event ID 4625)
• Performed incident investigation and response

🔹 Phishing Email Analysis – Threat Investigation

• Investigated phishing email headers (SPF/DKIM)
• Extracted Indicators of Compromise (IOCs)
• Used VirusTotal and URLScan for threat validation

🔹 Splunk SIEM Lab – Brute Force Detection

• Detected suspicious login activity using SPL queries
• Identified brute-force and credential stuffing patterns
• Performed log-based threat analysis

Skills Demonstrated

• SIEM Tools: Microsoft Sentinel, Splunk
• Log Analysis & Threat Detection
• KQL & SPL Query Writing
• Incident Response & Investigation
• Phishing Analysis & IOC Extraction

Author

Naba Maqsood

GitHub

https://github.com/NabaMqsood/Cybersecurity-Portfolio

📸 Project Screenshots

Each project includes real analysis screenshots demonstrating:

• SIEM dashboards
• Detection queries
• Threat investigation results