Habib Syed

Microsoft Azure: Azure Sentinel (SIEM)

• Used custom PowerShell script to extract metadata from Windows Event Viewer to be forwarded to third-party API in order to derive
  geolocation data
• Configured Log Analytics Workspace in Azure to ingest custom logs containing geographic information (latitude, longitude,
  state/province, and country)
• Configured Custom Fields in Log Analytics Workspace with the intent of mapping geo data in Azure Sentinel
• Configured Azure Sentinel (Microsoft's cloud SIEM) workbook to display global attack data (RDP brute force) on the world map according
  to physical location and magnitude of attacks.

Nessus Essentials: Vulnerability Management 

• Used Nessus Essentials to perform credentialed vulnerability scans against Windows 10 Hosts
• Conducted vulnerability assessment with Nessus: remediated vulnerabilities
• Developed automated remediation process to preemptively deal with vulnerabilities from Windows updates and third-party software

Active Directory: System Administration 

• Active Directory Administration: PowerShell (Automated provision, maintaining, and development of user accounts)
• Setting up Remote Access Server (RAS) features to support NAT/PAT
• Implementation and maintenance of Windows DNS and DHCP services
• Configuration of Windows File Servers with the implementation of quotas and NFTS permissions

File Integrity Monitor (FIM) 

• Created a integrity baseline of target files/folders using the SHA-512 hashing algorithm
• Continuously made comparison of actual files vs baseline, raised alerts if any deviations occurred
• Sent alert x-alert via y-means to allow further investigation of potential compromise