CORE COMPETENCIES

ASSET_MANIFEST // SUBJECT: RAGHAV GUPTA // CLASSIFICATION: TOP_SECRET

CLASSIFIED

SKILL_INDEX v6.0

CAT_SIEMPRODUCTION

Rapid7 InsightIDR

Rule tuning · Use case dev · Log correlation

88%

CAT_SIEMPRODUCTION

FortiSIEM

24×7 SOC monitoring · Alert triage

85%

CAT_SIEMPRODUCTION

Microsoft Sentinel (KQL)

KQL queries · Analytical rules · SOAR

84%

CAT_EDREXPERT

CrowdStrike Falcon

Threat detection · Host isolation · IOC extraction

82%

CAT_EDREXPERT

Palo Alto Cortex XDR

Endpoint monitoring · Behavioral analysis · Containment

80%

CAT_INCIDENTEXPERT

Incident Response

NIST-aligned IR lifecycle · Playbook execution · SLA closure

85%

CAT_THREAT_INTELADVANCED

MITRE ATT&CK

TTP mapping · IOC pivoting · Kill Chain analysis

82%

CAT_IAMADVANCED

Okta IAM

Provisioning · MFA enforcement · Access reviews

78%

CAT_NETWORKCERTIFIED

FortiGate 7.6

Firewall policy · Traffic analysis · IDS/IPS tuning

75%

CAT_SCRIPTINGADVANCED

Python / PowerShell

Log parsing · IOC enrichment · Automation scripts

72%

SOC ANALYST TOOL INVENTORY

INTEL_NODE: TOOLS_MANIFEST // SOC-RELEVANT PLATFORMS, FRAMEWORKS & UTILITIES ONLY

Rapid7 InsightIDRFortiSIEMMicrosoft SentinelManageEngineDatadog Cloud SIEMCrowdStrike FalconPalo Alto Cortex XDRQualys EDRSCCMMITRE ATT&CKSOCRadarAttackIQVirusTotalOkta IAMActive DirectorySailPointWiresharkFortiGate 7.6AviatrixPythonKQL (Kusto)PowerShellLinux CLIServiceDeskJiraOracle Cloud InfrastructureProofpointOSINT Techniques

SIEM & LOG MANAGEMENT

▶Rapid7 InsightIDR — rule tuning, use case dev
▶FortiSIEM — 24×7 SOC monitoring
▶Microsoft Sentinel — KQL queries & SOAR
▶ManageEngine — alerting & monitoring
▶Log correlation · Triage · Detection engineering

INCIDENT RESPONSE

▶Alert triage & severity classification
▶IOC analysis, enrichment & pivoting
▶NIST-aligned incident lifecycle
▶Playbook & runbook execution
▶SLA-compliant case closure via ServiceDesk

ENDPOINT DETECTION (EDR)

▶CrowdStrike Falcon — host isolation, containment
▶Palo Alto Cortex XDR — behavioral analysis
▶Qualys EDR — vulnerability prioritization
▶SCCM — patch management & deployment
▶Registry auditing & IOC extraction

THREAT INTELLIGENCE

▶MITRE ATT&CK — TTP mapping & adversary profiling
▶Pyramid of Pain · Cyber Kill Chain
▶Unified Kill Chain · Diamond Model
▶OSINT techniques & IOC pivoting
▶SOCRadar, AttackIQ, VirusTotal

ACADEMIC RECORD

Master of Computer Applications (MCA) — Cybersecurity

Jain Online University

Jul 2024 – Dec 2026

CGPA 7.70

PG Diploma — Cybersecurity

Craw Security

Jan 2021 – Jun 2022

80%

Bachelor of Computer Applications (BCA)

IMS Ghaziabad University

Aug 2017 – May 2020

62%

Diploma — Computer Hardware & Networking

IANT

Jan 2023 – Jun 2024

Grade A+

FILE: COMPETENCY_MATRIX_v6.0

SUBJECT: RAGHAV GUPTA // RESTRICTED