PCAP Quick Profiler
Extracts protocol activity, hosts, HTTP data, TLS indicators, and other useful evidence to accelerate initial network investigations.
U.S. Army Veteran · Security Operations
Brandon Love SOC Analyst | Incident Response | Detection Engineering
I am a U.S. Army Staff Sergeant with 12 years of leadership experience and hands-on cybersecurity experience building SIEM environments, investigating incidents, analyzing endpoint and network evidence, automating workflows, and developing practical security tools.
Microsoft Sentinel
Microsoft Defender
Wazuh
KQL
Python
PowerShell
DFIR
Network Forensics
MITRE ATT&CK
Azure
Portfolio Highlights
Original tools and investigation work that demonstrate job-ready skills.
Windows Log Triage
Produces HTML, JSON, and CSV outputs while identifying behaviors such as encoded PowerShell, LOLBins, suspicious process chains, and common attacker techniques.
Featured Projects
Selected projects showing detection, investigation, automation, and reporting.
Microsoft Sentinel + Defender Lab (Azure SIEM/SOAR)
Microsoft Sentinel + Defender Lab (Azure SIEM/SOAR)
Wazuh SIEM + VirusTotal + Action1 Patch Management Lab
Wazuh SIEM Deployment with Threat Intelligence & Patch Automation
DevSecOps Labs (AZ-2008)
Secure planning, PR-based change control, CI/CD + IaC, and resiliency testing with Azure + GitHub.
Explore the full project collection
SOC Playbooks
How I triage, investigate, document, and respond to security alerts.
Suspicious PowerShell Execution
Investigates encoded commands, suspicious parent-child relationships, downloaded payloads, persistence activity, and related network connections.
SharePoint Privilege Escalation
Reviews IIS and SharePoint evidence, authentication changes, uploaded files, privilege modifications, webshell indicators, containment, and patch status.
Malicious Office Document
Correlates the message source, attachment, Office child processes, dropped files, network traffic, user impact, and recommended containment actions.
Military Leadership Applied to Cybersecurity
Operational experience that strengthens security analysis and incident response.
I bring 12 years of U.S. Army experience, including two deployments and leadership responsibilities as a Staff Sergeant, Platoon Sergeant, Operations NCO, and Battle Desk NCOIC.
Latest Technical Writing
Incident investigations, SOC analysis, lessons learned, and security research.
Get in Touch
Open to cybersecurity opportunities, professional networking, and collaboration.