Skip to content
View spydisec's full-sized avatar
17 followers · 85 following

Achievements

Achievement: YOLOAchievement: Pair Extraordinairex3Achievement: QuickdrawAchievement: Pull Sharkx2Achievement: StarstruckAchievement: Arctic Code Vault Contributor

Achievements

Achievement: YOLOAchievement: Pair Extraordinairex3Achievement: QuickdrawAchievement: Pull Sharkx2Achievement: StarstruckAchievement: Arctic Code Vault Contributor

Block or report spydisec

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
spydisec/README.md
Cyber Security Consultant — Threat Intelligence & Detection Engineering

Chirag Shah  //  spydisec

Cyber Security Consultant · Australia

Profile views

About

6+ years across cloud security, detection engineering and threat intelligence — hardening regulated-client estates and shipping open-source threat intel.

  • 🛡️ Securing Azure · Microsoft 365 · AWS with Defender for Cloud, Azure Policy & CIS Benchmarks
  • 📡 Building Microsoft Sentinel & Wazuh detections mapped to MITRE ATT&CK
  • 🍯 Running honeypots + a production-style homelab — I break it here so attackers can't in prod
  • 📰 Maintaining spydithreatintel — OSINT threat-intel feeds & blocklists
  • 📫 Reach me at spyditi@proton.me · PGP key
  • ⚡ Why don't hackers ever get lost? They always find a backdoor.

Tech & Tools

Cloud & Identity

Azure Microsoft 365 AWS

Security & Detection

Microsoft Sentinel Microsoft Defender Wazuh MITRE ATT&CK

Build & Ops

Docker Linux Python Cloudflare Pulumi

AI & Automation

n8n Model Context Protocol AI Security

Certifications

Cloud & Identity

AWS Certified Cloud Practitioner AZ-900

Security

Wiz Partner Technical Accreditation AZ-500 in progress

Network & Edge

Cloudflare Implementation Specialist Cloudflare ACE

Featured Work

spydithreatintel — OSINT threat intel feeds honeypot-analyses — captured attack scripts

WinLogKit — Windows event logging baselines in PowerShell spydi-n8n-automation — security automations

Threat Intel Contributions

AbuseIPDB Contributor — IPs reported

Activity

GitHub stats
Contribution activity graph
Contribution snake animation

Connect

Email PGP key LinkedIn

Pinned Loading

  1. spydithreatintel spydithreatintel Public

    Spydi ThreatIntel Feed is built on open-source threat intelligence, community-maintained blocklists, and public security research.

    57 4

  2. spydi-n8n-automation spydi-n8n-automation Public

    Production-ready n8n workflows for infrastructure, monitoring, backup and alerting — documented, versioned and CI-validated.

    Python 1

  3. honeypot-analyses honeypot-analyses Public

    Malicious scripts captured from live honeypot interactions, kept for analysis. Warning: assume every file is malware — never run it outside isolation.

    Shell 1

  4. WinLogKit WinLogKit Public

    Implement the Yamato Security Windows event logging baselines with native PowerShell: tiered enable, read-only verification, rollback, and WELA-based independent checking. No agents, no modules.

    PowerShell 2