$ whoami

Swam Yee Zaw

Cybersecurity Analyst · SOC · Digital Forensics

MSc Cyber Security (NCI) seeking graduate and internship opportunities in SOC Analyst or Security Analyst role where I can apply hands-on skills in log analysis, SIEM, threat detection and incident investigation.

> ▍

Download CV Contact me
LinkedIn ↗ GitHub ↗ TryHackMe ↗
Portrait of Swam Yee Zaw YN
Open to opportunities · Dublin

02.

About Me & Technical Skills

I'm a cybersecurity professional based in Dublin with an MSc in Cyber Security from the National College of Ireland. I enjoy the investigative side of security: working through logs, packets and disk images to work out what really happened and how to stop it happening again.

Outside of my degree I practise continuously on TryHackMe and Hack The Box, Build and operate a home lab for detection engineering, developing, testing, and monitoring capabilities and documenting security detection rules what I learn in write-ups below.

  • edu MSc Cyber Security, NCI
  • thm Top 2% in Try Hack Me · Completed SOC Level 1 path
  • loc Dublin, Ireland

SIEM & Log Analysis

Alert triage, correlation searches, Windows event & Sysmon logs.

SplunkELKSysmon

Network Security

Traffic analysis, IDS rules, firewall configuration, segmentation.

WiresharkZeekSnort

Digital Forensics

Disk, memory and mobile artefacts; timeline reconstruction; chain of custody.

AutopsyFTK ImagerVolatility

Linux & Windows Admin

User & permission management, hardening, Active Directory, scripting.

BashPowerShellAD

Penetration Testing

Enumeration, exploitation and privilege escalation in lab environments.

Kali LinuxBurp SuiteNessusMetasploitBloodHound

Frameworks

Mapping findings to attacker techniques and incident response phases.

MITRE D3FENDMITRE ATT&CKNIST IRCyber Kill ChainISO/IEC 27001

03.

Projects & Practical Labs

Practical investigations and hands-on lab exercises, each documented using a consistent structure covering the objective, methodology, findings, and key learnings.

Digital Forensics MSc project

Instagram Digital Forensics Investigation

Forensic Investigation of Instagram application data to trace user activity, collect and analyse evidence, build an activity timeline, and report findings while maintaining the chain of custody.

Objective
Recover and correlate account activity from app data
Outcome
Reconstructed a three-stage timeline of an Instagram Direct Message: message sent (T1), Unsend attempt (T2), and application restart (T4). Although the conversation disappeared from the app interface after the restart, the original message text remained in local SQLite records. This demonstrated local data persistence beyond what was visible in the application interface.
AutopsyFTK ImagerDB Browser for SQLiteTimeline analysis
Read case study →
Penetration Testing Hack The Box

HTB DutyBound

End-to-end compromise of the target: enumeration, initial foothold, privilege escalation, plus remediation advice for each weakness found.

NmapBurp SuiteLinux privesc
Read write-up →
SOC TryHackMe

SOC Level 1 Investigations

Alert triage and incident investigations across phishing, endpoint and network cases, written up as analyst-style incident reports.

SplunkWiresharkPhishing analysis
Read write-up →
Home Lab Ongoing

Home Cybersecurity Lab

Virtualised lab with a Windows domain, Linux hosts, an attacker VM and a SIEM, used to simulate attacks and build detections. Includes network diagram.

Proxmox / VirtualBoxpfSenseWazuh / Splunk
See lab setup →
Network Analysis

Network Traffic Analysis

PCAP investigations identifying suspicious beaconing, DNS anomalies and data exfiltration, with IOCs extracted and mapped to MITRE ATT&CK.

WiresharkMITRE ATT&CK
Read analysis →

04.

Certifications & Education

In progress

Next certification

BTL1 · Target Dec 2026

2026 – 2027

MSc in Cyber Security

National College of Ireland, Dublin

Dissertation:

Relevant modules

  • Digital Forensics
  • Network Security & Penetration Testing
  • Security Fundamentals & Development
  • Cryptography & Blockchain
  • Malware Analysis
  • Cloud Security

2022 – 2025

BSc in Information and Communication Technology

Rangsit University, Bangkok, Thailand

Relevant modules

  • Digital Forensics
  • Network Security
  • Wireless Networking
  • Cloud Computing

05.

Write-ups & Learning Journal

Room write-ups, investigations and notes from the lab.

Incident analysis

Investigating a phishing alert end to end

From the SIEM alert to email header analysis, IOC extraction and containment recommendations.

[Date] · 6 min read Tools & tutorials

Splunk searches every SOC analyst should know

Practical SPL queries for failed logons, suspicious processes and lateral movement.

[Date] · 8 min read Forensics

Building a timeline from mobile app artefacts

How I extracted and correlated SQLite databases and cache files into one timeline.

[Date] · 10 min read CTF walkthrough

TryHackMe: [Room name]

Methodology and reasoning for each stage, without spoiling the flags.

[Date] · 7 min read Lessons learned

What my home lab taught me about detection

Mistakes, noisy rules and the detections that actually caught my simulated attacks.

[Date] · 5 min read

06.

Contact

Currently available for SOC Analyst, Security Analyst and DFIR roles in Dublin, hybrid or remote. Feel free to get in touch.