Anton avulman

Hi, my name is Anton! 👋

Project	Description
Adversary Detection as Code Lab	Built a production-style Detection Engineering Platform with CI/CD, treating detections as code: version-controlled, tested, and automatically deployed through GitHub Actions pipelines. The lab simulates a small enterprise environment across five systems, with detections validated using JSON event injection (Splunk), PCAP replay (Suricata), and structured fixture evaluation (Sigma) before deployment via REST API and Playwright UI automation.
Enterprise Phishing SOAR Automation	Built a production-style phishing detection and response automation platform integrating Microsoft 365, Microsoft Graph API, ServiceNow, and external threat intelligence. Automatically ingests reported phishing emails, extracts and enriches IOCs, calculates threat risk, hunts for impacted users, and creates ServiceNow incidents using Python-based automation on a Linux host.
Active Directory Splunk Lab	Designed and deployed a multi-VM Active Directory lab environment with Splunk SIEM and Sysmon for centralized logging and endpoint telemetry. Simulated brute force attacks using Crowbar, analyzed attack activity in Splunk, and leveraged Atomic Red Team and MITRE ATT&CK techniques to validate detection and monitoring capabilities.