Harsh Cheema

Energetic professional promoting Blue and Red Team skill sets through a career spent working with various types of hardware and software. Looking for a Cyber Security position where a background in mitigating risks or exploiting them will be highly valued.

• CompTIA Security + 501
• Active TS/SCI with Full Scope Polygraph (2019)

• George Mason University's Deans List (Every Year)
• Honors College Completion (Awarded Spring 2021)
• Riverside Research Scholarship (Awarded 2021-22)
• Andrew SAGE Competition Cybersecurity Track Best Paper (Awarded Spring 2021)

Cloud SIEM playbook using Azure Sentinel - In the process of creating a cloud Security Information and Event Management (SIEM) playbook using Azure Sentinel. Will build a sample virtual network with Azure with network security groups, route tables, resource groups along with virtual machines.

Android Repackaging Attack- Performed an Android Repackaging attack on a basic Android OS application. Used APKTool to reverse engineer and insert a malicious payload into the APK. Upon system rebooting, the malware deploys, erasing all contact information in the device. Simulated in VMs, involved Java code, video of demonstration on YouTube.

Drone Hacking Competition-Used Wireshark to examine wireless communication between the Parrot Bebop 2 drone and controller. Developed python scripts to hijack control of the drone and run commands from a laptop. Involved spoofing of ARSDK packets, use of evil twins, and understanding of WPA authentication and association.

Digital Forensics Expert Witness Report -Created a formal expert witness report written from a digital forensic experts where we are given a hypothetical scenario in the beginning of the semester and we have to follow government guidelines to write a chain of custody, make sure the digital image does not lose integrity, scan it for malware, analyze the image for evidence. A report was written that contained relevant evidence to the case and explained in an unbiased way. Tools such as FTKImager, OSFMount, Autopsy, HashCalc, etc were used., Summer 2020