Manish Rawat
Security Analyst | Threat Detection & SIEM
Just uploaded the 2nd Part of DLL Hijacking on #Substack
Where I analyzed real malware logs and discovered why non-admin users can execute code without triggering a single alert.
Link:
Working through the MITRE ATT&CK Evaluations APT29 dataset in Splunk and documenting everything I find. Part 1 covers EventID 1, the initial dropper, steganographic payload execution inside a PNG image, and what the EventID distribution revealed about how APT29 avoids...
Recently something interesting happened.
My research on DLL hijacking detection was referenced in work from the National Cyber Security Centre (Cyber Defence Analysis).
The section “37 Sysmon Events. One Complete DLL Hijacking Attack” came from my analysis of malware telemetry...
New here, don't really know what I'm doing yet 👋
SOC Analyst. Build security automation stuff. Recently automated a full detection pipeline and wrote some Sigma rules.
Work with Wazuh, Splunk, Python, all the usual suspects.
Looking for security projects - automations, SIEM work,...
medium.com
Manish Rawat – Medium
Read writing from Manish Rawat on Medium. From Political Science to SOC Analyst | Writing about cybersecurity, detection engineering, and the self-taught journey
When "5-Minute Integration" Turns Into an All-Night Battle 🔥
Spent last night integrating Wazuh with N8N for security automation. Hit every possible error - XML bugs, accidental deletions, self-inflicted DDoS.
Didn't quit. Fixed it all.
Skills deployed:
✅ SIEM integration &...
medium.com
Wazuh + N8N Integration Almost Beat Me — But Giving Up Wasn’t an Option
A SOC Analyst’s real story of persistence, coffee, and why small technical challenges matter more than you think