Defense Awarded | Author | Offensive and Defensive Security Manager | Public Speaker | DevSecOps | DFIR | Cloud Security | Threat Hunter | CSIRT | CTI

Dynamic cybersecurity leader with over a decade of experience driving enterprise-grade security, designing cloud security architecture, Networks and DevSecOps integration. Proven track record in managing complex end-to-end incident response, and executing high-impact digital forensics, threat hunting, malware analysis, etc. Recognized by the Government of India and Ministry of Home Affairs for outstanding contributions to national cybersecurity. Accomplished author of two books and 18 globally presented research papers, including at DEFCON, ToorCon, and OWASP. Demonstrated success in reducing security incidents by 80% through proactive threat intelligence, strategic planning, and advanced technical execution.

Complete Cyber Threat Intelligence (CTI) Masterclass | Learn and Hunt APT36 espionage group
UPCOMING
Complete Cyber Threat Intelligence (CTI) Masterclass | Learn and Hunt APT36 espionage group
🧠 Memory Forensics | Hands-on Ransomware Infected machine | Real-World Memory Analysis like a Pro
1:38:17
🧠 Memory Forensics | Hands-on Ransomware Infected machine | Real-World Memory Analysis like a Pro
Docker forensics - in-depth threat analysis for threat hunters
1:21:42
Docker forensics - in-depth threat analysis for threat hunters
pe32ransomware - an amateur but interesting ransomware that connects over telegram bot | DFIR
1:01:38
pe32ransomware - an amateur but interesting ransomware that connects over telegram bot | DFIR
Emotet - The Malware Kingpin Exposed | Complete DFIR and malware analysis
35:56
Emotet - The Malware Kingpin Exposed | Complete DFIR and malware analysis
Designing a Bullet Proof Incident Response (IR) Playbook - Stop Incidents from Becoming Disasters
45:32
Designing a Bullet Proof Incident Response (IR) Playbook - Stop Incidents from Becoming Disasters
Medusa ransomware unlocked - complete in depth ransomware analysis and digital forensics
1:16:23
Medusa ransomware unlocked - complete in depth ransomware analysis and digital forensics
Agent Tesla - CVE-2017-0199 - malware analysis
31:33
Agent Tesla - CVE-2017-0199 - malware analysis
DarkGate malware - Digital Forensics and Incident Response
44:20
DarkGate malware - Digital Forensics and Incident Response
EDR bypass - throwback using direct syscalls with AES encryption
1:53
EDR bypass - throwback using direct syscalls with AES encryption
Sock puppets - OSINT and Investigation
42:36
Sock puppets - OSINT and Investigation
OSINT & Investigations - Lab Setup like a real investigator
46:12
OSINT & Investigations - Lab Setup like a real investigator
Living off the Land attack via TPMtool
3:56
Living off the Land attack via TPMtool
Dirtypipe - Linux Privilege Escalation CVE2022-0847
1:39
Dirtypipe - Linux Privilege Escalation CVE2022-0847
log4j Remote Code Execution demo - CVE2021-44228
1:10
log4j Remote Code Execution demo - CVE2021-44228
Meterpreter Reverse Shell Complete EDR Bypass
1:07
Meterpreter Reverse Shell Complete EDR Bypass
Certificate Signing - Signing malwares with digital certificates to bypass AVs at runtime
1:03
Certificate Signing - Signing malwares with digital certificates to bypass AVs at runtime
MP4 malwares - Compromise remote machine using video files
1:04
MP4 malwares - Compromise remote machine using video files
ADCS NTLM Relay - Compromise the DC
1:59
ADCS NTLM Relay - Compromise the DC
Hive-Nightmare - Windows 10 CVE-2021-36934
1:45
Hive-Nightmare - Windows 10 CVE-2021-36934
Print Nightmare LPE Windows11 AV Bypassed (Fully undetectable) - FUD
1:11
Print Nightmare LPE Windows11 AV Bypassed (Fully undetectable) - FUD
Windows Simple Backdoor - Bypassed latest Anti-Virus
1:08
Windows Simple Backdoor - Bypassed latest Anti-Virus
Reverse Engineering - ReverseME
14:29
Reverse Engineering - ReverseME
S3 bucket -- Compromise and Data Leakage (leaking data through security holes)
16:12
S3 bucket -- Compromise and Data Leakage (leaking data through security holes)
AWS Identity Access Management (IAM) - Local Privilege Escalation (LPE)
1:41
AWS Identity Access Management (IAM) - Local Privilege Escalation (LPE)
Compromising the remote user's system through jpeg icons creating shortcut links
0:50
Compromising the remote user's system through jpeg icons creating shortcut links
Malware deployment (Reverse Connection) through Excel (office tools) -- Macro based FUD excel
0:45
Malware deployment (Reverse Connection) through Excel (office tools) -- Macro based FUD excel
md5-collisions
0:30
md5-collisions
Phishing or malware execution through PDF
6:47
Phishing or malware execution through PDF
Phishing or malware execution through Office Tools - Red Team awareness
0:39
Phishing or malware execution through Office Tools - Red Team awareness