Loading...
Hello,
I'M,
Alif Abedin Siyam
SOC Analyst | Security Researcher | Aspiring Penetration Tester
Your friendly neighbourhood security researcher—curious about how systems work, why they fail, and what the evidence reveals when something goes wrong. I learn by exploring deeply, testing responsibly, documenting honestly, and sharing what I discover along the way.
01 / Profile
> Overview
Curiosity is the job description.
I like finding the story hidden inside the noise.
Cybersecurity makes the most sense to me when defensive thinking and offensive curiosity inform each other. I enjoy following the details, questioning assumptions, and understanding how separate clues become one clear picture.
I'm building a career around that mindset: stay curious, test responsibly, communicate clearly, and never pretend the evidence says more than it does.
Meet the person behind the terminal30Published writeups
100+Alerts triaged weekly
1Documented project
research_loop.sys
01
ObserveNotice the details hiding in plain sight.
02
QuestionChallenge the first and easiest explanation.
03
TestTurn assumptions into controlled evidence.
04
ExplainMake the result clear and useful to others.
02 / Selected research
> Featured Writeups
OSINTTryHackMe
Cache Me Outside
An OSINT investigation built around cached public activity, identity clues, and evidence gathered across multiple platforms.
Public RecordsCached DataIdentity Correlation
CryptographyCryptoHack
Introduction to CryptoHack
A practical introduction to encodings, XOR, byte operations, and the foundational techniques used throughout CryptoHack.
EncodingXORPython
Privilege EscalationTryHackMe
Linux Privilege Escalation
A broad Linux privilege-escalation lab covering enumeration, weak permissions, scheduled tasks, capabilities, NFS, and multiple paths to root.
LinuxEnumerationSUID
Web ExploitationpicoCTF
n0s4n1ty 1
Turning weak profile-image upload validation into server-side code execution and controlled file access.
File UploadPHPCommand Execution
03 / Featured project
> Cybersecurity Homelab
Documented project
A personal SOC-style homelab that generates controlled attacks against isolated vulnerable targets such as DVWA, OWASP Juice Shop, and Metasploitable, traces the resulting telemetry through Wazuh SIEM, and turns it into a documented investigation workflow.
WazuhSuricataDockerLinuxSIEMDetection Engineering
01
Attack simulation
02
Vulnerable server or application
03
Logs and alerts
04
Wazuh rules
05
Dashboard investigation
04 / Credentials
> Certifications
Earned · 2025
Google Cybersecurity Professional Certificate
Completed professional training across security operations, networks, Linux, SQL, Python, detection, and incident response.
Planned · 2026
Microsoft Security Operations Analyst (SC-200)
My next planned certification goal, aligned with security operations analysis and Microsoft's security ecosystem.
05 / Connect
Let's start a conversation.
I'm open to SOC Analyst, junior penetration testing, security engineering, and general cybersecurity opportunities.