/ About
I bridge offensive and defensive security — from red team attack simulation and malware analysis through to SIEM detection engineering, alert triage, and threat investigation.
I've built STAS, an enterprise malware analysis platform with automated YARA/Sigma rule generation, IOC extraction, and campaign correlation, and ShadowForge, a C#/.NET red team simulation framework aligned to MITRE ATT&CK. I work daily with Microsoft Sentinel, Wazuh, and Splunk, writing KQL/SPL queries for detection engineering. I hold a responsible disclosure on Mastercard/Maestro PII exposure via HackerOne. The answer to “Can this person investigate a real security alert?” is yes.
Alongside that, I'm the Founder & CEO of Nocturne Systems, a technology holding company with a corporate structure spanning Pakistan, Singapore, and the UAE — the entity behind AegisCore.
Visit Nocturne Systems2018
Bug bounty & pentesting researcher since
14
Vulnerabilities remediated in a single production audit
/ Education
B.S. Computer Science
Sir Syed University of Engineering & Technology, Karachi
/ Skills
SIEM & Detection
- Microsoft Sentinel
- Wazuh
- Splunk
- T-Guard
Detection / Query
- KQL
- SPL
- Sigma
- YARA
- Wazuh Rules & Decoders
Security Analysis
- Wireshark
- Nessus
- Nmap
- Binwalk
- Scapy
- Hashcat
Offensive Security
- Metasploit
- MITRE ATT&CK Adversary Simulation
SOC Skills
- SIEM Monitoring
- Alert Triage
- Log Analysis
- Threat Detection
- IOC Analysis
- Malware Analysis
- Network Traffic Analysis
- Incident Investigation
- Threat Hunting
Endpoint / Logging
- Windows Event Logs
- Sysmon
- Linux System Logs
- Authentication Logs
- Process Monitoring
- Network Telemetry
Networking
- TCP/IP
- DNS
- HTTP/HTTPS
- TLS
- PCAP Analysis
Frameworks
- MITRE ATT&CK
- OWASP Top 10
- NIST SP 800-115
- ISO/IEC 27001
- PTES
- NIST CSF 2.0
Cloud / Infrastructure
- AWS
- DigitalOcean
- Docker
- nginx
- Cloudflare
- Linux
- Git
Programming
- Python
- C++
- C
- C#
- JavaScript
- TypeScript
- SQL
- Rust
- Go
- PowerShell
- Bash
- Assembly
/ Recognition & Research
HackerOne — Responsible Disclosure
Unauthenticated Mastercard/Maestro cardholder PII exposure (PCI DSS scope).
IEEE Paper
Co-authored a paper on the ATHENA AI security framework.
State Bank of Pakistan
Published research: blockchain white paper (NFBC).
Digital Pakistan Cybersecurity Hackathon
Built a multi-agent CTF-solving pipeline with FastAPI and SSE streaming.