Avior Mostovski Email & Phone Number

Tel Aviv District, Israel

Tel Aviv District, Israel

Petah Tikva, Center District, Israel

• Conducted in-depth investigations into cybersecurity incidents, utilizing expertisein various SIEM systems, including Qradar , Splunk , Mcafee , Azure Sentinel.• Applied knowledge and expertise in analyzing and investigating events by querying different EDR/XDR systems including Microsoft ATP , Cortex XDR , CrowdStrike Falcon , Cisco AMP , CarbonBlack , Sentinelone , Trend Vision One , Red Canary.• Investigate security incidents, perform root cause analysis, and collaborate with incident response teams to mitigate risks.• Demonstrated a minimum understanding of rule creation in various SIEM systems, along with the ability of Building queries using KQL, and SPL (Splunk).• Leverage SOAR platforms to automate and streamline incident response processes.• Experience with O365 - Security & Compliance Audit Log, Message Trace, Azure AD, Risky Users, Defender for Cloud Identity and Cloud Apps.• Acquired experience in gathering Threat Intelligence using various tools - OSINT.• Knowledge in security and monitoring products: WAF,IPS,NAC,AV,DLP,PROXY,FW.• Utilized mail relay systems such as Ironscales , IronPort , Proofpoint and more.• Understanding of Windows and Linux processes.• File investigation (Dynamic & Static analysis).• Proactive monitoring & Active threat hunting.• Quick adaptation to different work environments and systems.

Cybersecurity | Cysa+

Osint