class SOCAnalyst:
name = "Harvinder Singh"
role = "SOC Analyst | Blue Team"
company = "CyArt (SOC Intern)"
location = "India"
siem = ["Elastic Stack (ELK)", "Kibana", "Splunk"]
blue_team = ["Threat Detection", "Incident Response", "Log Analysis"]
framework = ["MITRE ATT&CK", "SOC Triage Methodology"]
tools = ["Wireshark", "Nmap", "Hydra", "Metasploit", "Kali Linux"]
languages = ["Python", "Bash"]
labs = ["TryHackMe", "LetsDefend", "VirtualBox Home Lab"]
status = "Open to SOC Analyst | Blue Team | Security Operations roles"
notice = "Immediate Joiner"| Area | Details |
|---|---|
| 🔍 Threat Detection | Real-time monitoring using ELK SIEM, Kibana dashboards for anomaly detection |
| 📊 Log Analysis | Windows Event Logs, Linux auth logs, SSH brute-force pattern identification |
| 🔴 Incident Response | SOC triage methodology, MITRE ATT&CK mapping, structured incident reporting |
| 🌐 Network Analysis | Wireshark PCAP analysis, Python traffic analyzer (PyShark + Matplotlib) |
| 🛠️ Security Tooling | Built PyCyberSuite — Python cybersecurity toolkit with Tkinter GUI |
| 🏴 Lab Practice | Daily TryHackMe and LetsDefend blue team labs |
|
Built SOC home lab · Kali (attacker) + Linux Mint (victim) + ELK SIEM SSH brute-force via Hydra → Detected in Kibana → MITRE ATT&CK T1110 
|
All-in-one Python toolkit · Network Scanner · Subdomain Enum Password Checker · Encryption Tools · Brute-Force Sim · JSON Reports
|
|
TCP scanner with real-time GUI · Color-coded results · Auto-save reports Threaded scanning · Zero external dependencies
|
|
| Platform | Certification | Year |
|---|---|---|
| 🟣 TryHackMe | Pre-Security Path | 2026 |
| 🔵 LetsDefend | SOC Member | 2026 |
| 🔵 LetsDefend | Phishing Email Analysis Expert | 2026 |
| 🔵 LetsDefend | Career Switch To Cybersecurity | 2026 |
| 🟡 NullClass | Real-Time SOC Project | 2026 |
| 🔴 Cyber Protectors | Ethical Hacking Program | 2025 |
┌──────────────────────────────────────────────────────┐
│ SOC HOME LAB │
├─────────────┬──────────────┬────────────────────────-─┤
│ KALI LINUX │ LINUX MINT │ ELK SERVER │
│ (Attacker) │ (Victim) │ Elasticsearch │
│ │ │ Kibana Dashboard │
│ Hydra ───► │ SSH Target │ Fleet Agent Manager │
│ Nmap │ + Elastic │ │
│ Wireshark │ Agent │ ✅ Detects: │
│ │ │ • Brute-force IPs │
│ │ Auth Logs │ • Failed Login Spikes │
│ │ Sys Logs │ • MITRE ATT&CK T1110 │
└─────────────┴──────────────┴──────────────────────────┘
Attack Flow: Hydra → SSH Brute-Force → ELK → Kibana Alert
- 🔵 Building advanced ELK SIEM detection rules and alert correlation
- 🧠 Deepening MITRE ATT&CK threat mapping for real-world scenarios
- 🏴 Daily TryHackMe and LetsDefend blue team lab challenges
- 📚 Preparing for CompTIA Security+ certification
- 🎯 Open to: SOC Analyst L1/L2 | Blue Team Analyst | Security Operations
