SBR shams.dev
Currently building

Windows telemetry, next

The next iteration of the detection lab adds a Windows endpoint with Sysmon feeding the same Wazuh stack. Most of the estates I have run have been Windows-first, and that is where the detection content a real SOC depends on actually lives. Write-up will land here when it is finished rather than when it is started.

Let's talk about the hard part.

Open to SOC Analyst, Security Analyst and Blue Team roles. Based in Dhaka, Bangladesh, and comfortable with distributed teams across time zones — I have spent three years working daily with a head office in Japan.

Open to IT Engineer, Network Engineer and Systems Infrastructure roles. Based in Dhaka, Bangladesh, and comfortable with distributed teams across time zones — I have spent three years working daily with a head office in Japan.