Skip to content
View thabosakonta-wq's full-sized avatar

Block or report thabosakonta-wq

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
thabosakonta-wq/README.md

Microsoft Certified Security Operations Analyst (SC-200)

Cybersecurity Analyst | SOC Analyst | Detection Engineering | Threat Hunting | Digital Forensics (DFIR) | Incident Response | Python Automation

About Me

Microsoft Certified Security Operations Analyst (SC-200) with hands-on experience building Security Operations Center (SOC) projects focused on Microsoft Sentinel, Detection Engineering, Threat Hunting, Incident Response, Digital Forensics (DFIR), Network Traffic Analysis, Windows Event Analysis, Sigma Rules and MITRE ATT&CK mapping.

My cybersecurity portfolio demonstrates practical investigations and blue-team workflows using Microsoft security technologies, Linux, Python, Bash, Sysmon, Velociraptor and GitHub.

Areas of interest include:

• Security Operations Center (SOC)

• Microsoft Sentinel

• Detection Engineering

• Threat Hunting

• Incident Response

• Digital Forensics (DFIR)

• Security Monitoring

• MITRE ATT&CK

I am currently seeking opportunities as a SOC Analyst, Cybersecurity Analyst, Detection Engineer, Threat Hunter, or Blue Team Analyst where I can apply my technical skills, investigative mindset, and commitment to continuous learning.

Certifications

  • Microsoft Certified Security Operations Analyst (SC-200)
  • Google Cybersecurity Professional Certificate
  • Career Essentials in Cybersecurity
  • Career Essentials in Generative AI
  • Microsoft Digital Literacy

Featured Projects

Microsoft Sentinel Lab

Simulates Microsoft Sentinel alert triage, incident investigation, MITRE ATT&CK mapping, and SOC workflows.

Repository

https://github.com/thabosakonta-wq/microsoft-sentinel-lab

Detection Engineering Lab

Development of Sigma rules for Windows Security Events, detection engineering workflows, and professional security reporting.

Repository

https://github.com/thabosakonta-wq/detection-engineering-lab

Threat Hunting Lab

Proactive threat hunting using Linux authentication logs, detection engineering, and MITRE ATT&CK mapping.

Repository

https://github.com/thabosakonta-wq/threat-hunting-lab

Velociraptor Investigation Lab

Digital Forensics and Incident Response (DFIR) investigation demonstrating endpoint artifact analysis and forensic workflows.

Repository

https://github.com/thabosakonta-wq/velociraptor-investigation-lab

Network Traffic Analysis Lab

Investigation of DNS, HTTP, and suspicious network communications with MITRE ATT&CK mapping.

Repository

https://github.com/thabosakonta-wq/network-traffic-analysis-lab

Python SOC Automation Lab

Python automation scripts for SOC investigations, log analysis, alert generation, and incident reporting.

Repository

https://github.com/thabosakonta-wq/python-soc-automation-lab

Technical Skills

Security Operations

  • Microsoft Sentinel
  • Threat Hunting
  • Detection Engineering
  • Incident Response
  • Digital Forensics (DFIR)
  • Security Monitoring
  • MITRE ATT&CK
  • Sigma Rules

Programming & Scripting

  • Python
  • Bash
  • PowerShell (Fundamentals)

Operating Systems

  • Windows
  • Linux
  • Android

Tools & Platforms

  • Microsoft Sentinel
  • Git
  • GitHub
  • Termux
  • Velociraptor
  • MITRE ATT&CK
  • Sigma

Current Learning Focus

I continue expanding my expertise in:

  • Microsoft Defender XDR
  • Advanced Microsoft Sentinel Analytics
  • Threat Intelligence
  • Detection Engineering
  • Cloud Security
  • Security Automation
  • AI for Cybersecurity

Career Objective

My goal is to build a career in Security Operations where I can contribute to protecting organizations through threat detection, incident response, detection engineering, digital forensics, and continuous security improvement.

I am actively developing practical blue-team skills through hands-on cybersecurity projects that simulate real-world SOC environments.

Connect With Me

LinkedIn

https://www.linkedin.com/in/thabo-sakonta-377a3748

GitHub

https://github.com/thabosakonta-wq

Portfolio Highlights

✔ Microsoft Sentinel Investigations

✔ Detection Engineering

✔ Threat Hunting

✔ Digital Forensics (DFIR)

✔ Network Traffic Analysis

✔ MITRE ATT&CK Mapping

✔ Windows Event Analysis

✔ Python SOC Automation

✔ Sigma Rule Development

✔ Professional Security Documentation

✔ Incident Investigation

✔ Security Reporting

Pinned Loading

  1. SOC-Analyst-Knowledge-Base SOC-Analyst-Knowledge-Base Public

    Professional SOC Analyst Knowledge Base covering Security Operations, Threat Hunting, Detection Engineering, DFIR, Microsoft Sentinel, MITRE ATT&CK, Playbooks and Interview Preparation.

  2. microsoft-sentinel-lab microsoft-sentinel-lab Public

    Microsoft Sentinel SOC Lab demonstrating alert triage, incident investigation, MITRE ATT&CK mapping, and threat detection workflows.

    Shell

  3. threat-hunting-lab threat-hunting-lab Public

    Hands-on threat hunting lab demonstrating log analysis, IOC investigation, incident reporting, evidence collection, and SOC analyst workflows.

    Shell

  4. detection-engineering-lab detection-engineering-lab Public

    Detection Engineering Lab demonstrating Sigma rule development, threat detection, and MITRE ATT&CK mapping.

  5. Python-SOC-Automation-Lab Python-SOC-Automation-Lab Public

    Python-based SOC Automation Lab demonstrating Windows Event Log analysis, detection engineering, alert correlation, incident investigation and MITRE ATT&CK mapping.

    Python

  6. velociraptor-investigation-lab velociraptor-investigation-lab Public

    Velociraptor-inspired DFIR and endpoint investigation lab using MITRE ATT&CK techniques.

    Shell