ASHISH HEDAU

Managed Engine

• Security Incident Monitoring: Utilized Managed Engine to continuously monitor the network for security incidents, ensuring timely detection and resolution of potential threats.

Microsoft Defender 365

• Threat Detection and Response: Implemented and configured Microsoft Defender 365 to detect and respond to advanced threats across email, data, and endpoints.

Qualys

• Vulnerability Management: Conducted regular vulnerability scans using Qualys to identify, assess, and remediate vulnerabilities across the IT infrastructure.

eSentire

• 24/7 Threat Monitoring: Collaborated with eSentire to maintain 24/7 threat monitoring and incident response services, analyzing alerts and coordinating with internal teams for remediation.

Trend Micro

• Advanced Threat Protection: Deployed Trend Micro solutions to provide advanced threat protection across the organization’s network and endpoints, monitoring threat intelligence feeds to enhance detection capabilities

Qualys Guard

• Vulnerability Assessment: Leveraged Qualys Guard for comprehensive vulnerability assessments across the network, identifying and categorizing vulnerabilities to prioritize remediation efforts, ensuring a secure IT environment and compliance with industry standards.

Wireshark

• Network Traffic Analysis: Utilized Wireshark to capture and analyze network traffic, identifying suspicious activities and potential security breaches, providing detailed packet-level insights to support forensic investigations and incident response.

Autopsy

• Digital Forensics: Conducted in-depth forensic analysis using Autopsy to examine digital evidence, recovering deleted files, analyzing file systems, and uncovering artifacts to support investigations into security incidents and data breaches.

Nessus

• Risk Management: Employed Nessus for regular network scans to detect vulnerabilities, misconfigurations, and policy violations, generating detailed reports to inform risk management strategies and improve the organization’s security posture.

Splunk

• Security Information and Event Management (SIEM): Integrated Splunk for real-time monitoring and analysis of security events, correlating data from various sources to detect anomalies, generate alerts, and support effective incident response and threat hunting activities.