Manish Rawat
Security Analyst | Threat Detection & SIEM
Profile in progress
Manish is building their profile!
Just uploaded the 2nd Part of DLL Hijacking on #Substack
Where I analyzed real malware logs and discovered why non-admin users can execute code without triggering a single alert.
Link:
Recently something interesting happened.
My research on DLL hijacking detection was referenced in work from the National Cyber Security Centre (Cyber Defence Analysis).
The section “37 Sysmon Events. One Complete DLL Hijacking Attack” came from my analysis of malware telemetry...
New here, don't really know what I'm doing yet 👋
SOC Analyst. Build security automation stuff. Recently automated a full detection pipeline and wrote some Sigma rules.
Work with Wazuh, Splunk, Python, all the usual suspects.
Looking for security projects - automations, SIEM work,...
medium.com
Manish Rawat – Medium
Read writing from Manish Rawat on Medium. From Political Science to SOC Analyst | Writing about cybersecurity, detection engineering, and the self-taught journey
When "5-Minute Integration" Turns Into an All-Night Battle 🔥
Spent last night integrating Wazuh with N8N for security automation. Hit every possible error - XML bugs, accidental deletions, self-inflicted DDoS.
Didn't quit. Fixed it all.
Skills deployed:
✅ SIEM integration &...
medium.com
Wazuh + N8N Integration Almost Beat Me — But Giving Up Wasn’t an Option
A SOC Analyst’s real story of persistence, coffee, and why small technical challenges matter more than you think
A Senior Challenged Me: "Build an Automated SOC Demo"
So I did.
What I built: Fully automated incident detection & response pipeline using Wazuh, N8N, Caldera, and Velociraptor.
The flow: Attack simulation → Detection → Auto-enrichment with VirusTotal → Jira ticket creation → Email...
medium.com
A Senior Challenged Me to Build an Automated SOC Demo. Here’s What I Built.
A few weeks back, a senior analyst gave me a challenge: “Build me a demo with Wazuh, N8N, Caldera, and Velociraptor. I want to see…