Dominic Nyongesa — Cybersecurity Analyst & Threat Hunter Portfolio

Welcome to the official cybersecurity portfolio repository for Dominic Nyongesa (dominic.nyongesa@student.moringaschool.com / @ngesa-cloud).

---

🛡️ Profile & Core Focus

• Analyst Name: Dominic Nyongesa
• Operational Role: Junior / Mid SOC Analyst, Threat Hunter & Security Engineer
• Institution: Moringa School Cyber Security Full Time (Cohort 10)
• Location: Nairobi, Kenya 🇰🇪 (EAT / UTC+3)
• Standards & Frameworks:
  • NIST SP 800-53 Rev. 5 (Controls: RA-5, SI-2, CM-6, AC-2, SC-8)
  • CIS Controls v8.1 (Control 7: Continuous Vulnerability Management, Control 8: Audit Log Management)
  • MITRE ATT&CK Enterprise Matrix v14 (Techniques: T1566, T1078, T1003, T1048.003, T1071)
  • FIRST CVSS v3.1 / v4.0 & SSVC
  • PCI-DSS v4.0 & ISO/IEC 27001:2022

---

⚡ Key Portfolio Features

1. Interactive SOC Terminal Simulator:

   • In-browser terminal emulator connected to emulated triage tools.
   • Run commands: whoami, skills, projects, vuln-scan, siem-alert, threat-intel, pcap, frameworks, contact, and clear.
   • Features arrow key history, auto-scrolling, and quick command chips for mobile users.

2. Contextual Vulnerability Prioritization Engine:

   • Live interactive calculator widget replicating Dominic's audit_scan.py algorithm.
   • Intersects raw CVSS base scores with Asset Criticality Tiers (Tier 1 Core DB/DC, Tier 2 App Server, Tier 3 Workstation) and Threat Exploit Intelligence (PoC vs CISA KEV active exploitation) to compute contextual remediation SLAs (P1 <24-48h, P2 <7d, P3 <30d).

3. Featured Security Projects & Case Studies:

   • FinSecure System Audit & Risk Assessment: Automated Python compliance suite verifying file permission masks (0700 on /secure_data), concurrent session thresholding, and disk capacity headroom. (Official grade: 100% Passed).
   • Wazuh SIEM Lab (APT29 Detection Engineering): Custom CEF decoders and hierarchical XML detection rules correlating phishing, RDP pivots, and LSASS credential dumping. (Official grade: 50/50 - 100%).
   • Contextual Vulnerability Prioritization Engine: Dual-host Greenbone scan analysis and automated Python triage engine. (Official grade: 50/50 - 100%).
   • Wireshark Packet Analysis (Retail POS Incident): Reconstructed covert ICMP exfiltration channel on payment network segment with Snort rules and containment playbooks.
   • Applied Cyber Threat Intelligence (CTI) Ingestion Pipeline: Automated AlienVault OTX REST ingestion extracting LockBit 3.0, QakBot, and AitM phishing IOCs. (Official grade: 50/50 - 100%).
   • PayReady KE: Zero-Document PayPal verification and AML source-of-funds platform for Kenyan bug bounty researchers on HackerOne, Bugcrowd, and Intigriti.
   • AI-Driven SOC Threat & Phishing Triage Engine: Automated Hugging Face transformer & Qwen model pipeline parsing raw emails (.eml), extracting IOCs, mapping MITRE ATT&CK T1566 techniques, and dispatching native Wazuh SIEM JSON alerts with synthesized remediation playbooks.

4. Interactive Modal System:

   • Deep-dive case studies with executive summaries, technical architectures, live code/rule snippets (with one-click copy), and compliance mappings.

5. Security Reports & Artifacts Vault:

   • Direct download and in-browser view links for verified HTML and PDF reports.

---

🚀 Local Preview

Run the included launch script to preview the portfolio locally on port 8080:

./serve.sh

Or using standard Python:

python3 -m http.server 8080

Open your browser at http://localhost:8080.

---

🌐 Deploying to GitHub Pages (ngesa-cloud.github.io)

To deploy this portfolio directly under your GitHub username:

Option A: Create ngesa-cloud.github.io (Recommended)

1. Create a public repository on GitHub named ngesa-cloud.github.io:

   gh repo create ngesa-cloud.github.io --public --source=. --remote=origin --push

2. Navigate to repository settings > Pages > Select Branch main > Save.
3. Your portfolio will immediately be live worldwide at:
   https://ngesa-cloud.github.io/

Option B: Deploy as a Sub-path (ngesa-cloud/portfolio)

1. Initialize git in this directory and push:

   git init
   git add .
   git commit -m "feat: initial cybersecurity portfolio launch"
   gh repo create portfolio --public --source=. --remote=origin --push

2. Enable GitHub Pages on branch main in the GitHub repo settings.
3. Live URL: https://ngesa-cloud.github.io/portfolio/

---

📁 Repository Structure

portfolio/
├── index.html          # Main responsive single-page cybersecurity web application
├── styles.css          # Custom cyber SOC theme, glowing animations & glassmorphism
├── app.js              # Interactive terminal, risk calculator & case study modal engine
├── serve.sh            # One-click local HTTP server runner
├── reports/            # Verified audit deliverables (HTML and PDF reports)
│   ├── Risk_Assessment_Report_FinSecure.html
│   ├── Risk_Assessment_Report_FinSecure.pdf
│   ├── Introduction_to_SIEM_Report.pdf
│   ├── Vulnerability_Assessment_and_Prioritization_Report.pdf
│   ├── Wireshark_Packet_Analysis_Report.html
│   ├── Wireshark_Packet_Analysis_Report.pdf
│   ├── Cyber_Threat_Intelligence_Report.pdf
│   ├── Linux_Access_Setup_ShoeSecure.html
│   └── Linux_Access_Setup_ShoeSecure.pdf
└── README.md           # Documentation and deployment guide

---

Engineered by Dominic Nyongesa with Antigravity AI Cybersecurity Partner.