/ About

I bridge offensive and defensive security — from red team attack simulation and malware analysis through to SIEM detection engineering, alert triage, and threat investigation.

I've built STAS, an enterprise malware analysis platform with automated YARA/Sigma rule generation, IOC extraction, and campaign correlation, and ShadowForge, a C#/.NET red team simulation framework aligned to MITRE ATT&CK. I work daily with Microsoft Sentinel, Wazuh, and Splunk, writing KQL/SPL queries for detection engineering. I hold a responsible disclosure on Mastercard/Maestro PII exposure via HackerOne. The answer to “Can this person investigate a real security alert?” is yes.

Alongside that, I'm the Founder & CEO of Nocturne Systems, a technology holding company with a corporate structure spanning Pakistan, Singapore, and the UAE — the entity behind AegisCore.

Visit Nocturne Systems

2018

Bug bounty & pentesting researcher since

14

Vulnerabilities remediated in a single production audit

/ Education

B.S. Computer Science

Sir Syed University of Engineering & Technology, Karachi

Aug 2025 – Dec 2029

/ Skills

SIEM & Detection

  • Microsoft Sentinel
  • Wazuh
  • Splunk
  • T-Guard

Detection / Query

  • KQL
  • SPL
  • Sigma
  • YARA
  • Wazuh Rules & Decoders

Security Analysis

  • Wireshark
  • Nessus
  • Nmap
  • Binwalk
  • Scapy
  • Hashcat

Offensive Security

  • Metasploit
  • MITRE ATT&CK Adversary Simulation

SOC Skills

  • SIEM Monitoring
  • Alert Triage
  • Log Analysis
  • Threat Detection
  • IOC Analysis
  • Malware Analysis
  • Network Traffic Analysis
  • Incident Investigation
  • Threat Hunting

Endpoint / Logging

  • Windows Event Logs
  • Sysmon
  • Linux System Logs
  • Authentication Logs
  • Process Monitoring
  • Network Telemetry

Networking

  • TCP/IP
  • DNS
  • HTTP/HTTPS
  • TLS
  • PCAP Analysis

Frameworks

  • MITRE ATT&CK
  • OWASP Top 10
  • NIST SP 800-115
  • ISO/IEC 27001
  • PTES
  • NIST CSF 2.0

Cloud / Infrastructure

  • AWS
  • DigitalOcean
  • Docker
  • nginx
  • Cloudflare
  • Linux
  • Git

Programming

  • Python
  • C++
  • C
  • C#
  • JavaScript
  • TypeScript
  • SQL
  • Rust
  • Go
  • PowerShell
  • Bash
  • Assembly

/ Recognition & Research

  1. HackerOne — Responsible Disclosure

    Unauthenticated Mastercard/Maestro cardholder PII exposure (PCI DSS scope).

  2. IEEE Paper

    Co-authored a paper on the ATHENA AI security framework.

  3. State Bank of Pakistan

    Published research: blockchain white paper (NFBC).

  4. Digital Pakistan Cybersecurity Hackathon

    Built a multi-agent CTF-solving pipeline with FastAPI and SSE streaming.