SUEYTAME

Configures Microsoft Defender for Endpoint (MDE) advanced protection

Configures Windows Event Logging with advanced audit policies to generate

Configuring Zscaler Private Access (ZPA) to replace traditional VPN

Executes containment strategies to stop active adversary operations

Correlates security events in IBM QRadar SIEM using AQL (Ariel Query

Correlates disparate security incidents, IOCs, and adversary behaviors

Deobfuscates malicious JavaScript code used in web-based attacks, phishing

Systematically deobfuscate multi-layer PowerShell malware using AST analysis,

Deploys deception-based honeytokens in Active Directory including fake

Deploying Cloudflare Access with Cloudflare Tunnel to provide zero trust

Deploys canary files (honeytokens) across file systems to detect ransomware

Deploys and configures CrowdStrike Falcon EDR agents across enterprise