Cybersecurity Portfolio

About Me

Hello, I'm Agata Gabara, a cybersecurity enthusiast focused on Security Operations (SOC), Threat Hunting, Detection Engineering, Incident Response, and Blue Team Operations.

This repository serves as a central hub for my cybersecurity projects, hands-on labs, and security investigations developed using Splunk Enterprise, Sysmon, Windows Event Logs, Sigma Rules, and MITRE ATT&CK.

---

Portfolio Overview

Project	Focus Area
Splunk SOC Lab	Security Monitoring & SOC Operations
Splunk Detection Engineering Lab	Detection Development & Validation
Threat Hunting Lab	Threat Hunting & Investigation
Incident Response Lab	Incident Handling & Analysis
Windows Forensics Lab	Digital Forensics & Event Analysis
Active Directory Security Lab	Authentication & Privileged Access Monitoring
Sigma Detection Lab	Sigma Rule Development
Detection-as-Code Lab	Detection Engineering & Rule Management
Purple Team Lab	Adversary Simulation & Detection Validation
Malware Analysis Lab	IOC Extraction, YARA Rules & Malware Analysis

---

Featured Projects

Detection Engineering

• Splunk Detection Engineering Lab
• Detection-as-Code Lab
• Sigma Detection Lab

Threat Hunting

• Threat Hunting Lab
• Purple Team Lab

Incident Response & Forensics

• Incident Response Lab
• Windows Forensics Lab

Active Directory Security

• Active Directory Security Lab

Malware Analysis

• Malware Analysis Lab

---

Technical Skills

SIEM & Monitoring

• Splunk Enterprise
• Windows Event Logs
• Sysmon

Detection Engineering

• Splunk SPL
• Sigma Rules
• Detection-as-Code
• YARA Rules

Threat Hunting

• IOC Investigation
• Endpoint Telemetry Analysis
• Windows Security Event Analysis

Incident Response

• Security Investigation
• Event Correlation
• Forensic Analysis
• Detection Validation

Frameworks

• MITRE ATT&CK

---

Key Competencies

• Security Monitoring
• Threat Detection
• Threat Hunting
• Detection Engineering
• Incident Response
• Windows Forensics
• Active Directory Security
• Malware Analysis Fundamentals
• Blue Team Operations

---

Project Repositories

Splunk SOC Lab

https://github.com/ag48665/Splunk-SOC-Lab

Splunk Detection Engineering Lab

https://github.com/ag48665/Splunk-Detection-Engineering-Lab

Splunk Detection Library

https://github.com/ag48665/Splunk-Detection-Library

Threat Hunting Lab

https://github.com/ag48665/Threat-Hunting-Lab

Incident Response Lab

https://github.com/ag48665/Incident-Response-Lab

Windows Forensics Lab

https://github.com/ag48665/Windows-Forensics-Lab

Active Directory Security Lab

https://github.com/ag48665/Active-Directory-Security-Lab

Sigma Detection Lab

https://github.com/ag48665/Sigma-Detection-Lab

Detection-as-Code Lab

https://github.com/ag48665/Detection-as-Code-Lab

Purple Team Lab

https://github.com/ag48665/Purple-Team-Lab

Malware Analysis Lab

https://github.com/ag48665/Malware-Analysis-Lab

---

Career Objective

Currently developing practical experience in:

• SOC Operations
• Threat Detection
• Threat Hunting
• Detection Engineering
• Incident Response
• Security Monitoring

---

Connect With Me

GitHub: https://github.com/ag48665

LinkedIn: https://www.linkedin.com/in/agatha-gabara-06494a37/

---

Author

Agata Gabara

Cybersecurity Analyst | SOC Analyst | Threat Hunter