Available · Gurugram, India

Hunting adversaries. Building the tools to do it faster.

Security analyst and indie hacker. At work I run detection engineering and threat intelligence for enterprise clients. After hours I build security tools and the occasional consumer product.

See the work Get in touch
01

About

On a given day I'm tracking a ransomware group's leak site, writing detection logic for an attack chain hitting Indian enterprises, automating analyst work, or shipping a security product.

I study adversary tradecraft from primary sources. Most of my work happens inside enterprise SIEM environments across a multi-client MSSP book: threat hunting, dark web monitoring and CERT-In responsible disclosure.

Outside work I build security tooling and a few consumer products. Everything in the projects section was built solo.

  • Threat Hunting
  • Detection Engineering
  • Dark Web Intelligence
  • Adversary Research
  • Security Tooling
  • MSSP Operations
02

Capabilities

BLUE TEAM

Threat Hunting

Hunting across enterprise SIEMs, mapped to MITRE ATT&CK, with findings turned into detection rules.

TRADECRAFT

Adversary Research

Studying how threat actors operate from primary sources: leak sites, infrastructure and victim disclosures.

INTELLIGENCE

AI × Security

Using LLMs for alert triage, threat brief writing and hunt query generation.

OSINT

Dark Web Intelligence

Ransomware leak site monitoring, threat actor tracking and breach intelligence, with a focus on India.

03

Technical stack

Detection & Hunting

  • IBM QRadar
  • Palo Alto XSIAM
  • Splunk
  • Wazuh
  • MITRE ATT&CK
  • Sigma Rules

Development

  • Python / FastAPI
  • React / Vite
  • Laravel / PHP
  • PowerShell
  • SQLite / Postgres
  • Docker

Intelligence

  • Ransomware Site Monitoring
  • Threat Actor Tracking
  • Dark Web Infrastructure
  • Victim Disclosure Analysis
  • Actor Attribution
  • Enterprise Threat Briefing
04

Projects

Security tooling and products, built solo.

TALK · 2026

AI-Driven Cyber Threat Intelligence Pipelines

NullU Delhi Chapter, eSec Forte Technologies. My first public talk at a security community meetup, where I presented THREATPULSE.

CURRENTLY

Building detection logic for advanced phishing and identity-based attack chains in enterprise environments.

05 · Contact

Let's work.

Security work, product collaborations, intelligence engagements, or just to talk tradecraft.

Reporting a vulnerability? See security.txt.