abishekvengeri

@abishekvengei

Hacking, Learning, Growing – My Cybersecurity Path.

kozhikode ,keralaJoined April 2025

About

Cybersecurity Enthusiast | CTF Creator | Ethical Hacking Learner Passionate about cybersecurity, CTF challenges, and ethical hacking. Sharing my journey, experiences, and lessons as I explore the world of security.

abishekvengeri's blogs

Abishek's Blogabishekvengeri.hashnode.dev20 posts

Recently published

abishekvengeri.hashnode.dev

Detecting Web Reconnaissance with Wazuh — Catching the Attack Before It Starts

Most attacks don’t begin with exploitation.They begin with looking around. In this lab, I focused on detecting web reconnaissance activity — the phase where an attacker maps a target, tests endpoints, and looks for weaknesses. The idea was to see whe...

Dec 23, 20253 min read

abishekvengeri.hashnode.dev

Incident Analysis: SSH Brute-Force Attack Detected by Wazuh

This lab was designed to simulate a real credential-based attack and observe how a host-based SIEM behaves during high-volume abuse. Instead of focusing on dashboards, I treated this like an actual SOC incident: attack happens first, investigation co...

Dec 23, 20253 min read

abishekvengeri.hashnode.dev

Coordinated Login Attack Detection with a Custom Alert Action (Splunk)

This lab pushed me a bit outside my comfort zone. Until now, most of my Splunk work was about searches, dashboards, and alerts. Here, I wanted to answer a tougher question: What if the attack is distributed and doesn’t come from a single IP? That’s...

Dec 22, 20253 min read

abishekvengeri.hashnode.dev

Threat Intelligence Alerting in Splunk — Making the SIEM Speak First

After enriching Apache logs with a threat intelligence lookup, the next obvious question was: Why should I keep checking this manually? In a SOC, if a known bad IP appears in live traffic, the system should tell you — not the other way around.This ...

Dec 21, 20252 min read

abishekvengeri.hashnode.dev

Threat Intelligence Correlation in Splunk — Practical Guide

I wanted to test how useful simple threat feeds are when combined with live web logs. The goal was straightforward: upload a small threat feed, enrich Apache logs with it, and see whether I can quickly highlight risky IPs on a dashboard. This lab is ...

Dec 20, 20253 min read

Search Hashnode

abishekvengeri

About

abishekvengeri's blogs

Recently published

Detecting Web Reconnaissance with Wazuh — Catching the Attack Before It Starts

Incident Analysis: SSH Brute-Force Attack Detected by Wazuh

Coordinated Login Attack Detection with a Custom Alert Action (Splunk)

Threat Intelligence Alerting in Splunk — Making the SIEM Speak First

Threat Intelligence Correlation in Splunk — Practical Guide