← All Projects

CYBERSECURITY / DIGITAL FORENSICS

Network Investigations & Digital Forensics

Follow the evidence from network events to a clear, defensible technical narrative.

Wireshark PISCES / Kibana Traffic analysis Evidence correlation MITRE ATT&CK Mantis CISA Malware Threat Detection Elasticsearch Threat Detection NIST Network Security Monitoring

Academic team project · Fall 2025

INVESTIGATION WORKFLOW EVIDENCE-LED
01 Collect Traffic · Logs
→
02 Correlate Time · Events
→
03 Investigate Leads · Patterns
→
04 Report Evidence · Context
ANALYSIS FOCUS Illustrative workflow

Conceptual visualization of event correlation—not measured incident data.

THE APPROACH

Technical detail.
Clear decisions.

This project brings together practical implementation thinking, clear documentation, and an emphasis on making complex technical work understandable and useful.

PROJECT WALKTHROUGH

Inside the work

01

Investigate the signal

Network investigations combine packet-level observations with logs and timeline context. The goal is to distinguish ordinary activity from events that merit deeper examination.

02

Correlate multiple sources

Wireshark and PISCES/Kibana-supported analysis helped organize observations, compare events, and pursue additional investigative leads rather than relying on a single indicator.

03

Turn findings into a useful report

The work emphasized evidence validation, clear explanations, and visual summaries so that technical observations could be understood and acted on by others.

04

Final Deliverables

The investigation successfully transformed raw network data and digital artifacts into documented, supportable findings. Additional evidence collected during the investigation helped fill gaps in the initial results and provided a more complete picture of the activity under examination. Evidence was correlated and analyzed to identify relevant network activity, potential indicators of compromise, and relationships between artifacts. The final results were presented through a comprehensive technical report supported by data visualizations and documented evidence, demonstrating the ability to investigate incomplete information, develop additional investigative leads, and communicate technical findings clearly.


COMPLETED CYBERSECURITY CLIENT REPORT


PROJECT MITRE ATT&CK MAPPING DIAGRAM

YOUR NEXT PROJECT

Let’s solve the right problem.

Tell us what you need to improve, build, secure, or simplify.

Start a conversation ↗