Harsh Cheema

Experienced with network forensics, threat analysis, and incident response. Utilizes analytical skills to fortify systems against potential breaches. Strong understanding of risk management and proactive security measures. My current training is focused on penetration testing and cryptography.

Cloud SIEM playbook using Azure Sentinel - In the process of creating a cloud Security Information and Event Management (SIEM) playbook using Azure Sentinel. Will build a sample virtual network with Azure with network security groups, route tables, resource groups along with virtual machines.

Android Repackaging Attack- Performed an Android Repackaging attack on a basic Android OS application. Used APKTool to reverse engineer and insert a malicious payload into the APK. Upon system rebooting, the malware deploys, erasing all contact information in the device. Simulated in VMs, involved Java code, video of demonstration on YouTube.

Drone Hacking Competition-Used Wireshark to examine wireless communication between the Parrot Bebop 2 drone and controller. Developed python scripts to hijack control of the drone and run commands from a laptop. Involved spoofing of ARSDK packets, use of evil twins, and understanding of WPA authentication and association.

Digital Forensics Expert Witness Report -Created a formal expert witness report written from a digital forensic experts where we are given a hypothetical scenario in the beginning of the semester and we have to follow government guidelines to write a chain of custody, make sure the digital image does not lose integrity, scan it for malware, analyze the image for evidence. A report was written that contained relevant evidence to the case and explained in an unbiased way. Tools such as FTKImager, OSFMount, Autopsy, HashCalc, etc were used., Summer 2020