About Page

By

 👋 Hello there! I'm Sanket More

I am starting this blog as my personal knowledge base but will be glad if anyone can find this useful. I will be basically sharing my personal thoughts and knowledge around the cybersecurity domain. My journey toward the industrial certification was achieved as well as the home labs I am currently working on.

I have experience working as a Technical Support engineer in PwC India. After pursuing my Masters's in Network Information Security I'm currently on a journey to become a cybersecurity professional.


💭 My Interest

While working as a Technical support engineer gave me an immense opportunity to have conversations with some of the intellectual personalities along with helped me learn more about servers, data centers, and how organizations manage and place policies around spam emails and data loss protection mechanisms.

This embarked me on my journey in cybersecurity as it left me with immense curiosity about how these technologies work and how companies manage to safeguard themselves from cyberattacks.


👍 My Key Competencies

  • Leadership - Having taken up a leadership position while leading a small team of individuals with unique personalities while consolidating the ticket management system ServiceNow and improving the ticket turnover rate by 7%.
  • Troubleshooting Skill - My majority of experience has come from troubleshooting and de-escalating key situations, and handling pressure situations while maintaining 90% of customer satisfaction ratings.
  • Communication Skills - While being the first point of contact I have communicated efficiently with vendors, associates, and partners along with supporting 200+ clients on-site and remotely on daily basis.
  • Teamwork - I have worked in a team environment while always being reliable, understanding, and helpful to my teammates.

📖  Achivements and Certifications

  • CompTIA Network+ (StationX)
  • CompTIA Security+ (certified)
  • Splunk Core Certified User
  • NDG Linux Essentials
  • Fortinet NSE1
  • Fortinet NSE2


Comments

Post a Comment

Popular posts from this blog

SIEM(Splunk) dashboard creation - Firewall

By
Image
Summary: In this blog we are going to create a Firewall Dashboard in SIEM tool Splunk which helps an organization to visualize its security in real-time. Dashboards : Dashboard consists of one or more panels displaying data visually, presenting it in a useful way in form of events, tables or charts which can be used to measure, monitor & analyze revelant key areas. Now, we will go forward and create a firewall dashboard which will help us in better analyzing our data. (P.s We have already uploaded firewall logs on splunk. Please check this blog -  https://bit.ly/3UQWoBP) First, we will install this "Infosec" app from -  https://splunkbase.splunk.com/app/4240 which adresses most common security issues and we will create the same dashboard. Dashboard Panels : Panels that our dashboard will have are: 1-  Blocked connections : (   We are using Palo Alto traffic logs to find out all the blocked connections) index=botsv2 sourcetype="pan:traffic" action=blocke...
Read more

Uploading demo logs and analyzing Firewall logs

By
Image
Summary: In this blog, we are going to download demo logs from GitHub and upload, understand and analyze FortiGate and Palo alto raw logs. Uploading logs to Splunk : We will start by downloading the dataset from  https://github.com/splunk/botsv1  this site. Here in the below pic, you can see two different datasets ( One containing normal and attack logs and the other one containing only attack logs). I am downloading the attack logs. This dataset contains different types of logs as shown below. As the botsv1 dataset contains only FortiGate firewall logs for Palo Alto logs we will download the botsv2 dataset from this site https://github.com/splunk/botsv2 Uploading logs to Splunk: After downloading both the datasets, extract and copy both the folders and paste them to  InstallationPath/Splunk/etc/apps    After this step, we will allow Splunk to parse the logs for a few seconds and then check as shown below. Here, we can see that both the datasets have been uploa...
Read more

My first Cybersecurity Certification

By
Image
After learning about CompTIA security+ through LinkedIn and after doing some initial research about the content, book, and objectives of the exam I got an understanding that this certification touches on every part of the fundamental cybersecurity domain in great detail. In this blog, I will discuss what I learned from the certification, the key materials to study and how to learn it so that it can be beneficial to apply these concepts while dealing with real-life situations or in a home-lab environment. How the certification helps? As we know CompTIA security+ is a global certification it validates and helps us have the baseline knowledge to perform core cybersecurity operations. It helps an individual to identify and address potential threats, risk management techniques, and also intrusion detection and prevention systems among others. As the exam covers 6 important domains within cybersecurity some of the key topics I learned and think were very essential in building up my knowledge...
Read more