Skip to content
View moisesceazard-creator's full-sized avatar

Block or report moisesceazard-creator

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
moisesceazard-creator/README.md

Moises Ceazar Del Mundo

Aspiring SOC Analyst · ISC2 Certified in Cybersecurity (CC) · Open to OJT
Fourth-year BSIT (Information Security) · De La Salle Lipa · Philippines

Portfolio LinkedIn Email ISC2 CC on Credly

👋 About me

Blue Team–focused Information Security student looking for a SOC Analyst / Cybersecurity OJT (internship). I learn by building lab environments, attacking them in a controlled way, and documenting what the detections caught — and what they missed.

  • 🏆 1st Place, Best Capstone Project (Information Security Track) and 1st Place, Best Group Presentation — IT Colloquium '26–'27
  • 🛡️ Deployed a live Security Onion monitoring platform for the MIS Office of Tanauan City Hall — 9.7M+ events indexed, 100% detection of simulated attacks
  • 🧪 SOC Lab Mentee in the DysrupIT × De La Salle Lipa industry partnership
  • 📚 Currently: Google Cybersecurity Certificate · next up: CompTIA Security+

🔐 Featured work

Project What it shows
Security Onion SOC Handbook — Tanauan City Hall Plain-language SOC user manual written for the capstone client
Security-Onion-Telegram-Alerting ElastAlert 2 → Telegram Bot API alerting with MITRE ATT&CK-tagged rules
SOC-Incident-Writeups 11 Tier 1 investigations (CVE-2024-3400, ToolShell CVE-2025-53770, Lumma Stealer…)
Wazuh-SIEM-Endpoint-Monitoring-Lab Wazuh agent–manager, FIM, active response, custom XML rules
Nessus-Vulnerability-Assessment-Lab Nessus scanning and remediation playbooks with before/after proof
Email-Header-Forensics-and-Authentication-Analysis SPF, DKIM, DMARC and ARC analysis for phishing triage
Netscanner v3 (docs on request) Pure-Python raw-socket host scanner: ICMP + TCP fallback, 200 threads, a /24 in ~1–1.5 s
Nmap-Network-Reconnaissance-Lab Authorized recon, service enumeration and exposure assessment

🧰 Toolbox

  • SIEM & detection: Security Onion · Wazuh · Elastic Stack (Kibana) · Suricata · Zeek · ElastAlert 2 · Sigma · Osquery / Elastic Fleet
  • SOC operations: Alert triage · KQL threat hunting · PCAP analysis (Wireshark) · case management · containment · incident reports
  • Endpoint & network security: Sophos Central · Sysmon · Action1 RMM · Fortinet FortiGate · pfSense · T-Pot honeypot
  • Vulnerability & testing: Tenable Nessus · OpenVAS · Kali Linux · Nmap · Metasploit · Hydra · Lynis
  • Threat intel & malware analysis: VirusTotal · AbuseIPDB · AlienVault OTX · Any.run · Hybrid Analysis · CyberChef · MXToolbox
  • Systems, networking & scripting: Python · PowerShell · Bash · SQL · Git · Windows · Linux · Active Directory · Proxmox VE · VLANs · DHCP · subnetting
  • Governance & risk: NIST CSF 2.0 · CIS Controls v8 · MITRE ATT&CK · STRIDE · risk assessment (ALE, cost-benefit) · BC/DR planning · Philippine NCSP 2023–2028

📜 Certifications

ISC2 Certified in Cybersecurity (CC) · Appkademiya Certified Cybersecurity Professional (CCP) · Google Cybersecurity courses · Fortinet Threat Landscape 3.0 · Cisco Intro to Cybersecurity · DICT Region IV-A trainings (GitHub Actions, CALABARZON CyberTalks) · 6 LetsDefend SOC badges

Open to SOC / cybersecurity OJT in the Philippines — on-site, hybrid or remote.

Pinned Loading

  1. Security-Onion-Telegram-Alerting Security-Onion-Telegram-Alerting Public

    Automated Security Onion alert forwarding to Telegram using the Telegram Bot API, with buffered alert delivery for SOC monitoring.

    Python 1

  2. SOC-Incident-Writeups SOC-Incident-Writeups Public

    Hands-on SOC investigation writeups based on simulated security incidents, covering alert triage, threat analysis, MITRE ATT&CK mapping, and incident response.

    1

  3. CYBERSECURITY-MAIN-PORTFOLIO CYBERSECURITY-MAIN-PORTFOLIO Public

    Cybersecurity portfolio highlighting hands-on SOC analyst experience, security labs, incident investigations, vulnerability assessments, and certifications.

    HTML

  4. Nessus-Vulnerability-Assessment-Lab Nessus-Vulnerability-Assessment-Lab Public

    Hands-on vulnerability assessment and remediation lab using Tenable Nessus on Kali Linux.

  5. TANAUAN-Security-Onion-Handbook TANAUAN-Security-Onion-Handbook Public

    Plain-language SOC user manual for the Security Onion deployment at the MIS Office of Tanauan City Hall (capstone project).

    HTML

  6. Wazuh-SIEM-Endpoint-Monitoring-Lab Wazuh-SIEM-Endpoint-Monitoring-Lab Public

    Wazuh SIEM/XDR deployment, endpoint monitoring, and threat detection lab documenting individual contributions to a team-based Proxmox environment.