Aditya Salish

DISTRIBUTED SIEM & HOST-BASED THREAT DETECTION LAB

Designed and deployed a multi-node blue-team security laboratory using Oracle VirtualBox and Ubuntu Server. • Configured a centralized Wazuh SIEM/XDR manager to aggregate and monitor security telemetry from endpoints. • Onboarded a Windows endpoint into the centralized monitoring environment using authenticated agent registration. • Configured File Integrity Monitoring (FIM) through ossec.conf to monitor critical directories for unauthorized changes. • Simulated unauthorized file modifications and system-tampering scenarios to validate security detection capabilities. • Analyzed and triaged generated alerts through the Wazuh administrative dashboard. • Practiced end-to-end blue-team workflows covering log collection, security monitoring, detection, alert analysis and incident investigation.

WEB VULNERABILITY SCANNER

Developed a Python-based command-line vulnerability scanner to identify common web application security weaknesses. • Implemented detection capabilities for SQL Injection, Cross-Site Scripting (XSS) and authentication-related vulnerabilities. • Automated structured security findings and reporting to support vulnerability assessment workflows. • Applied knowledge of web application attack surfaces and common exploitation techniques. • Strengthened practical understanding of VAPT methodology, vulnerability identification and security reporting. • Used security-testing concepts to understand attack paths and defensive remediation requirements.

CYBERSECURITY FRAMEWORK FOR SMALL BUSINESSES

Researched cybersecurity risks affecting small and medium-sized businesses, focusing on common attack vectors and security-control gaps. • Developed a tailored cybersecurity framework addressing phishing, weak authentication and DoS-related threats. • Recommended layered security controls to reduce exposure across people, processes and technology. • Designed and implemented a packet-filtering mechanism to help mitigate DoS-related network attacks. • Developed implementation guidelines and security recommendations for SME environments. • Created basic incident response plans and security policy documentation to support organizational security readiness. • Applied governance, risk and security-control concepts to a practical business environment.