Tin Nguyen

Recent Cybersecurity graduate with strong foundational knowledge in network security, risk management, threat intelligence, and vulnerability analysis. Highly motivated with the ability to adapt and self-teach. Purposefully engaged and experienced with a variety of security tools such as Wireshark, Splunk, and Snort. Constantly trying to learn and improve security skills, using platforms such as Tryhackme.com, Hackthebox, and dedicated home lab. Actively try to stay up to date with the industry using social media, various security podcasts, and reading articles.

Azure Sentinel (SIEM)

• Used custom PowerShell script to extract metadata from Windows Event Viewer to be forwarded to third party API in order to derive geolocation data
• Configured Log Analytics Workspace in Azure to ingest custom logs containing geographic information (latitude, longitude, state/province, and country)
• Configured Custom Fields in Log Analytics Workspace with the intent of mapping geo data in Azure Sentinel
• Configured Azure Sentinel (Microsoft's cloud SIEM) workbook to display global attack data (RDP brute force) on world map according to physical location and magnitude of attacks

Active Directory Simulator, 

• Active Directory Administration-PowerShell: Automated provision, maintaining, and deprovisioning user accounts
• Setting up Remote Access Server (RAS) features to support NAT/PAT
• Implementation and maintenance of Windows DNS and DHCP services, Configuration of Windows File Servers with implementation of quotas and NTFS permissions

File Integrity Monitor (FIM)

• Created a integrity baseline of target files/folders using the SHA-512 hashing algorithm
• Continuously made comparison of actual files vs baseline, raised alerts if any deviations occurred
• Sent alert x-alert via y-means to allow further investigation of potential compromise

VirtualBox Home Lab

• Home lab running Virtual Box with several virtual machines. designed to experience with active directory, DHCP, and DNS utilizing a Windows 2019 Server as the domain controller
• Future goal for this home lab is to intercept different kinds of network traffics between machines and collect data using packet sniffing tools to advance log analysis skills and experience with SIEM tools