إبراهيم الغامدي

Cybersecurity Specialist at SAFCSP, TUWAIQ Academy Sep 2021 - Jan 2022 •
4 months of training in PenTest, Digital Forensic, and Incident Response (+550 hours): -
- Simulating Cyber-attacks, such as Password cracking, SQLi, XSS, Unrestricted File Upload, Privilege Escalation, Buffer overflow, LFI & RFI, Kernal, Pivot, EternalBlue, and SMB Relay.
- Analyzing and harvesting data using FTK Imager, Autopsy, and Eric Zimmerman tools.
- Analyzing Windows registry, files, and executable files. - Searching and analyzing logs in Splunk SIEM solution.
- Filtering logs alerts by Sysmon, PowerShell, and Windows event logs.
- Getting familiar with incident response recycling and Cyber Kill Chain.

• IT Specialist at Royal Commission for Jubail and Yanbu (COOP Trainee) Feb 2021 - Sep 2021

- Virtualize machines and servers through Hyper-V.

- Applying policies and AppLocker in Active Directory.

- Creating domains and making trusted relationship.

- Monitoring alerts in Splunk SIEM Solution.

- Scanning the network using YARA Rules.

- Installing Windows OS and backing up system devices using Acronis.

- Formatting and configuring Cisco switches.

- Hardware maintenance including Hard Disks, RAMs,
and Cooling fans.

- Saving the department 20, 000 SR by welding a distribution switch.
- Installing software via Microsoft SharePoint.