Duygu Demirler

Cyber Security Analyst @Cybernow Labs

Provided cyber support in a 24x7 Cyber Security Operation Center (SOC), including detection, response, and supportHandled offenses generated by IBM QRadar and notable events on Splunk ES, such as authentication failures, connection to known malware sites, traffic from untrusted networks, firewall denies, and potential data loss. Conducted log analysis on SIEM solutions like IBM QRadar and Splunk ES and provided recommendations to the technical teams via Resilient and Jira ticketing systems. Monitored the company devices with Endpoint Detection and Response (EDR) solutions such as Crowdstrike Falcon and SentinelOne. Monitored company email using Proofpoint cloud-based email security solution. Conducted analysis to determine the legitimacy of files, domains, and emails using OSINT tools.Analyzed PCAP files, narrowed down anomaly traffic with Wireshark, examined the details of the infected hosts, and created IOC on executive summary reports. Differentiated false positives from intrusion attempts and triaged the necessary cases to higher levels.