Cybersecurity portfolio
Hi, I am Jamal Darbo
Cybersecurity analyst. Naturally curious about IT, security and how systems work.
A space to document what I learn, explore security questions and share practical insights.
Connect on LinkedIn
Security focus
View profileUnderstanding threats, finding useful signals and turning research into better detection. These are the areas I explore.
Detection Engineering
From attacker behaviour to actionable detection logic.
Windows Security
Exploring system behaviour, telemetry and defensive controls.
Threat Intelligence
Connecting adversary context with practical security questions.
Malware Analysis
Investigating malicious software to understand its behaviour.
Latest blog posts
Read BlogUnder the hood of Windows: Using Process Monitor
A step-by-step look at svchost.exe with Process Monitor: filtering events, following file and registry activity, and understanding the parent process.
Packet capture analysis of a SocGholish and AsyncRAT infection
Following a SocGholish and AsyncRAT infection through a packet capture: suspicious TLS traffic, DNS correlations, HTTP streams and obfuscated PowerShell.
Investigating Koi Stealer malware using Wireshark
An end-to-end Wireshark investigation of a Koi Stealer packet capture, examining beaconing, HTTP payloads, internal network activity and indicators of compromise.