---
title: "Manju Lalwani (@infrashield) | Hashnode"
description: "Blue Team | Purple Team | Threats, Detections & Cloud Things | Women in Cyber 🛡️. Read the latest articles by Manju Lalwani on Hashnode."
url: "https://hashnode.com/@infrashield"
---

@infrashield

# Manju Lalwani

@infrashield · India · Joined April 2025

Blue Team | Purple Team | Threats, Detections & Cloud Things | Women in Cyber 🛡️

### [Building a Modular Kubernetes Deception Tool \[kube-coy\]](https://mavericksec.hashnode.dev/building-a-modular-kubernetes-deception-tool-kube-coy?utm_source=hashnode&utm_medium=feed)

A deep dive into building lightweight Kubernetes deception scenarios for defenders — one YAML at a time.

6 min read · [mavericksec.hashnode.dev](https://mavericksec.hashnode.dev/building-a-modular-kubernetes-deception-tool-kube-coy?utm_source=hashnode&utm_medium=feed)

[Aug 30](https://hashnode.com/posts/building-a-modular-kubernetes-deception-tool-kube-coy/6a946a5f0a6c0767f125561e)

### [TRACE — Enterprise Risk Closure Framework](https://mavericksec.hashnode.dev/trace-enterprise-risk-closure-framework?utm_source=hashnode&utm_medium=feed)

SOC teams close false positives daily without examining the cloud misconfiguration behind them. Here is the framework that changes that.

4 min read · [mavericksec.hashnode.dev](https://mavericksec.hashnode.dev/trace-enterprise-risk-closure-framework?utm_source=hashnode&utm_medium=feed)

[Aug 16](https://hashnode.com/posts/trace-enterprise-risk-closure-framework/6a8446aa9769587dfd148181)

### [Building a Threat Hunting Agent from Scratch — What Broke, and Why It Matters](https://mavericksec.hashnode.dev/building-a-threat-hunting-agent-from-scratch-what-broke-and-why-it-matters?utm_source=hashnode&utm_medium=feed)

Built a threat hunting agent using rules first, then LLMs. Every stage broke. Here is what each failure taught me about signal vs noise.

5 min read · [mavericksec.hashnode.dev](https://mavericksec.hashnode.dev/building-a-threat-hunting-agent-from-scratch-what-broke-and-why-it-matters?utm_source=hashnode&utm_medium=feed)

[Apr 28](https://hashnode.com/posts/building-a-threat-hunting-agent-from-scratch-what-broke-and-why-it-matters/69f0850e10a70b33358d1cdc)

### [Adding ReAct to My AI Security Agent — What Changed](https://mavericksec.hashnode.dev/adding-react-to-my-ai-security-agent-what-changed?utm_source=hashnode&utm_medium=feed)

I rebuilt my AI security monitoring agent using the ReAct framework. Here is what broke, what improved, and what to build next.

7 min read · [mavericksec.hashnode.dev](https://mavericksec.hashnode.dev/adding-react-to-my-ai-security-agent-what-changed?utm_source=hashnode&utm_medium=feed)

[Mar 15](https://hashnode.com/posts/adding-react-to-my-ai-security-agent-what-changed/69b6d55ef4eb2f8b04a56b90)

### [Building a Simple AI Log Analyzer in Python — What I Learned from the Bugs](https://mavericksec.hashnode.dev/building-a-simple-ai-log-analyzer-in-python-what-i-learned-from-the-bugs?utm_source=hashnode&utm_medium=feed)

Built a Python LLM log analyzer for security. Four bugs revealed how AI actually behaves inside a real SOC pipeline.

5 min read · [mavericksec.hashnode.dev](https://mavericksec.hashnode.dev/building-a-simple-ai-log-analyzer-in-python-what-i-learned-from-the-bugs?utm_source=hashnode&utm_medium=feed)

[Mar 13](https://hashnode.com/posts/building-a-simple-ai-log-analyzer-in-python-what-i-learned-from-the-bugs/69b403924e5702eb0dd7130f)