Threat Intelligence · SOC · Security Research

Hi, I’m Dovy, also known as x0hashbrown.

I detect indicators of compromise in phishing, scam websites and malware files across Windows and Linux — and I automate the hunt so security teams can stay ahead of threats.

See my work GitHub Contact
Illustrated portrait of Dovy wearing glasses and a plaid shirt

01 — About

Security analyst and researcher, still learning — and automating what I learn.

I specialize in detecting indicators of compromise in phishing, scam websites and malware files, on both Windows and Linux machines. My passion is automating threat detection and helping organizations stay ahead of cyber threats.

Most of my projects are written in Python, but I’m learning C and C++ — so you might stumble upon those too. Beyond work, you’ll find CTF rooms from TryHackMe, PCAP analysis for threats, homelab projects and a bit of Arduino robotics.

01

Automated IOC detection

02

Phishing, scam & malware site analysis

03

Integrates into security workflows

04

Customizable, extensible scripts

02 — Skills

Threat Intelligence

  • Phishing & scam website detection
  • IOC extraction & enrichment
  • Malicious domain analysis
  • Passive DNS, WHOIS, certificate transparency
  • Threat actor TTPs (MITRE ATT&CK)

SOC Operations

  • Alert triage & investigation
  • SIEM / EDR workflow
  • Incident escalation & reporting
  • Wazuh lab deployment
  • Clear, actionable write-ups

Malware Analysis

  • Malware file triage (WIN + LINUX)
  • Static & beginner dynamic analysis
  • YARA rule authoring
  • PCAP & network indicator analysis
  • Write-ups with extracted IOCs

Automation & AI

  • Python scripting (requests, pandas, regex)
  • AI agents & LLM tooling
  • Detection & enrichment pipelines
  • Learning C and C++
  • Arduino / robotics side projects

Tooling

  • Python
  • C
  • C++
  • YARA
  • Wireshark
  • Wazuh
  • Burp Suite
  • VirusTotal
  • Shodan
  • MITRE ATT&CK
  • TryHackMe
  • Linux
  • Git

03 — Experience

  1. Threat Intelligence Analyst Nord Security 2025 — Present

    Track phishing, scam and malicious domains, extract IOCs and hand detections to the SOC while the campaign is still warm.

    • Replace with a real achievement and metric
  2. SOC Analyst HWG Sababa 2024 — 2025

    Triaged alerts across SIEM and EDR, escalated confirmed incidents and documented root cause for each case.

    • Replace with a real achievement and metric
  3. Independent Research Self-directed Ongoing

    Malware analysis write-ups, CTF rooms on TryHackMe, PCAP analysis and Python tooling for threat detection.

    • Homelab with Wazuh, Arduino robotics, learning C/C++

04 — Projects

Python · Threat Intel

scam_site_detection

Automated detection of scam websites — flags indicators of compromise so analysts can act fast.

Malware Analysis

Malware-Analysis-Writeups

Write-ups of malware analyzed with multiple analysis tools, including extracted IOCs.

CTF

CTF-Writeups

Write-ups for CTF rooms from TryHackMe, MetaCTF and others.

Security Engineering

Sec-Engineering-lb

Files, scripts and explanations to set up and maintain a Wazuh lab.

Homelab

homelb

Homelab projects — where the experiments and robotics tinkering live.

This site

aledovy.github.io

This minimalist personal site — plain HTML, CSS and a tiny Python server.

05 — Contact

Found something interesting? Let’s talk.

Open to threat intelligence research, SOC roles and collaboration on detection projects.

Connect on LinkedIn GitHub