Omkar Raut

A cybersecurity consultant with 3 years of experience, who reduced security risk by 70% through implementing security measures, is now seeking a rewarding career in their area of specialization to utilize their full potential and contribute to the company’s long-term growth.

1.  Project Tunestore  

• Identified and analyzed vulnerabilities within the Tunestore application through a security assessment.
• Conducted a comprehensive security assessment and penetration test to evaluate the overall security of the application.
• Discovered and successfully exploited multiple SQL injection and cross-site scripting (XSS) vulnerabilities, as well as broken access control and clickjacking.
• Implemented mitigation strategies using secure code practices to address and resolve all identified vulnerabilities.
• Performed threat modeling for the application, resulting in the reduction of the attack threat vector.

2. Splunk Project 

• Deployed and configured Splunk on local account for log management and analysis.
• Integrated logs from servers, computers, and networks into Splunk for comprehensive monitoring.
• Analyzed over 100k logs to investigate various types of traffic, including DDoS attacks, Command and Control traffic, Ransomware activities, SQL Injection attempts, and Man-in-the-Middle attacks.
• Took proactive measures to mitigate threats by blocking suspicious IP addresses on the firewall for enhanced security.

3.Malware Analysis

• Performed static and dynamic analysis on “mur.exe" and discovered complex malware with dangerous capabilities, including keylogging.
• Identified malware's connection to external server TOOPOLEX.COM for obtaining sensitive data through encryption and CA certificates.
• Highlighted the malware's ability to terminate all processes, including debuggers, using the Terminate Process function.
• Noted the malware's use of various API calls, Windows functions, and manipulation of mouse and keyboard events to evade detection.
• Used tools such as CFF Explorer, PEView, Virus Total, Strings,Resource Hacker, Dependency Walker, Apate DNS, Process Explorer, Regshot,Wireshark, ProcMon,IDA Pro, OllyDbg,

4. Digital Forensics

• Conducted digital forensics investigation on criminal activity as final project for Digital Forensics course
• Analyzed logical images from laptop and USB drive, examining data such as communications, images, web searches, and text files
• Seized accuser's Android phone, laptop, and USB drive to aid in the investigation
• Improved digital forensics analysis skills through project, gaining proficiency in analyzing computers and USB drives
• Utilized tools such as FTK Imager , Autopsy , Reg Explorer, Greenshot, Event Viewer, Silent Eye, Reg Explorer

CEH - Certified Ethical Hacker

OSCP- In Progress

Certified Network Security Specialist