Selected Projects

Designed and built a malware detection pipeline that catches threats both when they are written to disk and while they are already running, with automated quarantine, threat intel enrichment, and AI assisted behavior analysis. Validated with adversary emulation and continuous false positive tuning. This was an internal engagement, so implementation details are confidential.

Cowrie honeypot integrated with Wazuh SIEM to capture and analyze SSH attack attempts in real time, with automated Telegram alerting for fast team response. Documented in a technical article on Medium.

SOAR infrastructure in the Network Lab of Universitas Muhammadiyah Yogyakarta, wiring Wazuh, Shuffle, MISP, and Iris together to automate incident response workflows.

Analysis of a malicious wedding invitation APK with MobSF and JADX, identifying the Telegram API endpoint used to exfiltrate victim data.

Automated, modular reconnaissance pipeline for bug bounty and authorized security testing. Orchestrates Amass, Subfinder, Httpx, and Nuclei with Telegram integration.

A collection of writeups for CTF events I have participated in: pwn, reverse, web, and forensics.

10+ technical articles on cyber security, CTF writeups, and simplified research.

Step by step pwn challenge, levels 1 to 3, built around the ret2win concept.