LOG COLLECTIONMITRE ATT&CK
insoSIEM
SIEM-focused project exploring log collection, normalization, detection use cases, and investigation workflows.
HighlightRepeatable triage notes
Status2025-Present
STATUS: ACTIVE // ENTRY_LEVEL_CYBERSECURITY_ANALYST
Anil Budthapa
Entry-level cybersecurity and SOC candidate based in Melbourne with hands-on lab and project experience in alert triage, incident handling, SIEM investigations, log analysis, Windows security events, Active Directory and IAM fundamentals, vulnerability assessment, and OWASP-aligned web testing.
policy
SOC Level 1
Alert triage, escalation, investigation notes
verified_user
GRC
Risk, compliance basics, documentation
fingerprint
IAM
Access reviews, AD, identity workflows
SKILLS_MATRIX
Technical stack and analyst competencies
SYS_LOAD: LEARNING_ACTIVE
security SOC & DETECTION
LEVEL: JUNIOR_READYAlert triage and escalationFOCUS
SIEM log investigationLAB
OWASP web testingPROJECT
SIEMSplunk
WEBBurp Suite
NETWORKWireshark / Nmap
METHODMITRE ATT&CK
cloud PLATFORMS
Windows Security Eventscheck_circle
Linux Fundamentalscheck_circle
AWS / Azure Basicscheck_circle
Active Directorycheck_circle
VULN_&_IAM
Vulnerability AssessmentOWASP Top 10Access ReviewsUser GroupsEDR/XDR Basics
Comfortable documenting findings, validating common issues, and connecting identity activity to SOC monitoring use cases.
terminal
AUTOMATION_SCRIPTING
01 Python for security tooling
02 Bash and shell scripting
03 SQL and Go fundamentals
def triage_alert(event):
# enrich, map, document
context = map_to_mitre(event)
write_findings(context)
return "READY_FOR_REVIEW"
SYSTEM_PORTFOLIO // PROJECTS
CYBER_DEFENSE_LABS
Projects from the resume: SIEM workflows, OWASP-aligned testing, secure application design, SOC practice, Active Directory identity security, and GRC documentation.
open_in_new
pentesting_framework.py
Pentesting Framework
Modular web security testing framework aligned to OWASP Top 10 with evidence capture and reporting structure.
- terminal Recon and testing modules
- terminal Evidence handling
- terminal Structured reports
Care Portal
Role-based application project emphasizing permissions, authentication and authorization flows, and secure design thinking.
Least PrivilegePythonSQL
TRAINING_MODULEmonitoring
SOC / Analyst Practice
Hands-on practice with HTTP traffic, sessions, authentication behavior, Windows security events, triage, escalation decisions, and structured findings.
Practice LoopONGOING
hub
Active Directory Security Lab
Lab-based practice covering users, groups, privileges, access reviews, and identity-related SOC monitoring use cases.
Documentation arrow_forwardverified_user CERTIFICATIONS
Google Cybersecurity Professional Certificate
Provider: Google - Completed
shield
SOC Level 1 Certificate
Provider: TryHackMe - Completed
THM-6K5TBUSQXE
cloud_done
Cloud Computing Fundamentals
Provider: Simplilearn SkillUp - Completed
school ACADEMIC_PATH
EXPECTED COMPLETION: 2026
Bachelor of Information Technology
Major: Cybersecurity - Kent Institute Australia, Melbourne
FOCUS
Cybersecurity
LOCATION
Melbourne
MEMBERSHIPS
ISACA + ACS
ISACA ID 2244571 and Australian Computer Society Member ID 4476790.
BLOGS_PATH_READY
A publishing path is ready for future writeups
articlePATH: /blogs/
Blog Index
Placeholder index for future SOC notes, detection writeups, GRC learning, IAM labs, and project case studies.
Open path arrow_forwardSysmon Event IDs
Existing blue-team reference for SOC teams using Sysmon telemetry.
Read current post open_in_new$ mkdir blogs/new-post
ready_for_future_content=true
$ publish_next_writeup.sh
STATUS: WAITING_FOR_AUTHOR
System.Connection_Protocol
Establish a Secure Connection.
Currently based in Springvale, Melbourne, VIC, Australia. Open to graduate, junior, and entry-level cybersecurity opportunities across on-site, hybrid, and remote roles in Australia.
location_on
CURRENT_LOCATION
Springvale, Melbourne
Open to relocate anywhere in Australia
mailPORT_25
Direct Messaging
For recruitment inquiries, collaborations, or junior security opportunities.
[email protected] arrow_forwardguest@anil-budthapa: ~/contact
$ whoami
anil_budthapa
$ cat target_roles.txt
junior_soc_analyst | cybersecurity_analyst | vulnerability_management | security_operations | iam_analyst | grc_analyst
$ cat contact.txt
[email protected] // phone=+61 421 688 186 // linkedin=linkedin.com/in/anilbudthapa
$