class SOCAnalyst:
    def __init__(self):
        self.name        = "Sovan Das"
        self.location    = "Raigarh, Chhattisgarh, India"
        self.role        = "Aspiring SOC Analyst"
        self.education   = "B.Tech CSE @ O.P. Jindal University (2026)"
        self.htb_rank    = "#979 Globally"
        self.achievement = "WorldSkills India — Gold Medalist (Cyber Security)"

    def focus_areas(self):
        return [
            "Threat Detection & Alert Triage",
            "SIEM Engineering (Splunk)",
            "Log Analysis & Incident Response",
            "Network & Memory Forensics",
            "Blue Team Operations",
        ]

    def current_mission(self):
        return "Building SOC-grade tools while hunting for my first SOC role 🎯"

me = SOCAnalyst()

✅ SIEM Engineering        →  Splunk log ingestion, dashboards, detection rules, alert triage
✅ Active Directory        →  AD administration, event log monitoring, privilege escalation detection
✅ Incident Response       →  Alert triage, threat hunting, log correlation
✅ Network Forensics       →  Wireshark, TCPdump, PCAP analysis (Scapy)
✅ Memory Forensics        →  Artifact extraction, process analysis
✅ Web Security            →  OWASP Top 10, WAF implementation, SQLi/XSS detection
✅ Threat Frameworks       →  MITRE ATT&CK mapping
✅ Server Hardening        →  Linux & Windows hardening, SSH security, firewall rules
✅ Cryptography            →  SSL/TLS, encryption fundamentals

Real-world SOC simulation in a virtualized environment

• Built a Windows Active Directory environment integrated with Splunk SIEM for centralized log collection
• Ingested and analyzed Windows Security Event Logs to track logins, account changes, and policy violations
• Created custom detection rules and dashboards to identify unauthorized access and privilege escalation in real time

Python-powered threat detection for Linux environments

• Built a Linux-based log monitoring system using Python & Shell scripting for fully automated analysis
• Parsed authentication and system logs to surface anomalies and unauthorized access attempts
• Implemented rule-based alerting for brute-force attacks, root SSH access, and privilege escalation events

Production-grade WAF with real-time SOC dashboard

• Built a Python-based reverse proxy WAF (FastAPI) to inspect HTTP traffic and block attacks via a threat scoring engine
• Implemented detection for SQLi, XSS, and brute-force with automated alerting, logging, and IP blocking (with timed unblocking)
• Enabled PCAP-based forensic analysis using Scapy and a live SOC dashboard for real-time threat visibility

• 🔐 Preparing for CompTIA Security+ (SY0-701) — Expected May 2026
• 🎯 Climbing the ranks on Hack The Box (currently #979 globally)
• 🔭 Expanding my SOC home lab with new detection use cases
• 💼 Actively seeking an entry-level SOC Analyst role

---

💬 SOC Analyst Mindset

---

🤝 Let's Connect