open to SOC L1 opportunities
// Cybersecurity Student · Blue Team
$
Yazan Abu Mahmoud
y2z3// cybersecurity handle
$
Cybersecurity Student | SOC Analyst | DFIR
$
Blue Team · SOC Operations · Digital Forensics · Incident Response
$
TryHackMe — Rank #65,308 (Top 3%) · 115 rooms · 25 badges
Top 3%
TryHackMe global rank
115
Rooms completed
25
TryHackMe badges
#2
AAUCTFv1 CTF
5
Certifications earned
certifications
Verified credentials
Click any credential to view the certificate itself, plus a link to verify it directly with the issuer.
CCDL1
Certified CyberDefender Level 1 — blue team fundamentals across log, network, and endpoint analysis.
view certificate →
Security+ (SY0-701)
Industry-standard baseline cert covering security architecture, operations, and risk management. Valid through Oct 2028.
view certificate →
eCIR
Certified Incident Responder — hands-on incident response methodology from detection through containment and recovery.
view certificate →
eCDFP
Certified Digital Forensics Professional — evidence acquisition, analysis, and reporting across disk, memory, and network artifacts.
view certificate →
Pre Security Path
Foundational path covering networking, web, and Linux/Windows fundamentals — 7h 38m of hands-on rooms.
view certificate →
SOC Level 1 Path
65h 29m path covering SIEM triage, threat intel, log/network/endpoint forensics, and phishing analysis.
view certificate →
achievements
Rankings & competitions
Top 3%
TryHackMe — Global Ranking
Ranked in the top 3% of all TryHackMe users worldwide across rooms, paths, and CTFs.
view profile ↗
2nd Place
AAUCTFv1 — Capture The Flag
Placed 2nd overall in the AAU CTF v1 competition against university teams.
view credential ↗
2 Paths
TryHackMe Path Completions
Pre Security & SOC Level 1 — 73+ hours of structured, hands-on blue-team training.
view profile ↗
projects
Hands-on labs
Self-built detection & forensics labs, documented and version-controlled on GitHub.
CySYzn / suricata-wazuh-ids-lab
Suricata + Wazuh IDS Lab
Network-based intrusion detection lab using Suricata + Wazuh, validated against a live vsftpd 2.3.4 backdoor exploit on Metasploitable2.
view repo ↗
CySYzn / wazuh-rdp-bruteforce-detection
Wazuh RDP Bruteforce Detection
Host-based intrusion detection lab using Wazuh + Sysmon, validated against a live RDP brute-force attack (Hydra) and unauthorized remote access on a Windows 10 endpoint.
view repo ↗
CySYzn / phishing-email-forensics-lab
Phishing Email Forensics Lab
Hands-on forensic analysis of a synthetic phishing email — header/routing inspection, SPF/DKIM/DMARC verification against a real domain's DNS records, and malicious-PDF triage using pdfid and pdf-parser.
view repo ↗
CySYzn / PCAP-Security-Analyzer
PCAP Security Analyzer
Python tool that parses PCAP/PCAPNG files, flags suspicious IPs by packet volume and port-scan behavior, and charts protocol distribution with PyShark and Matplotlib.
view repo ↗
writeups
Lab writeups
Full methodology, real commands, real screenshots — grouped by platform. Click through to see every lab.
CyberDefenders
9 labs completed
Blue-team CTF challenges — memory forensics, network analysis, phishing kits, and threat intel, solved end-to-end and documented question by question.
View all labs ↗
tools & stack
What I work with
SIEM & Log Analysis
Network Forensics
Memory Forensics
Threat Intel & OSINT
Disk Analysis
Registry & Artifact Analysis
Email Forensics
