Mohammed Aljedani
I am an Information Technology undergraduate at King Abdulaziz University (Expected 2028) based in Jeddah, Saudi Arabia, specializing in cybersecurity with a focus on Purple Team operations—the intersection of offensive penetration testing and defensive detection engineering.
My approach to security is built on a simple principle: to defend a network effectively, you need to understand how it is attacked, and to test a network meaningfully, you should know what telemetry your actions leave behind. In my home lab, I build Active Directory and Linux environments to practice offensive enumeration and exploitation while inspecting the resulting logs in Splunk, Sysmon, and Wireshark.
Education
Bachelor of Science in Information Technology
King Abdulaziz University
Faculty of Computing and Information Technology — Coursework and lab focus in computer networks, operating systems, information security, web architectures, and database systems.
Certifications & Credentials
Core security architecture, network defense, cryptography, incident response, and governance.
Hands-on network penetration testing, Active Directory exploitation, pivoting, and web application attacks.
End-to-end enterprise penetration testing methodology, lateral movement, privilege escalation, and professional reporting.
Technical Skills & Tooling
Organized across offensive testing, purple validation, and defensive engineering.
Purple Team & Threat Validation
Connecting offensive attack simulation with defensive detection engineering.MITRE ATT&CK Mapping & Emulation
Translating real-world adversary TTPs into controlled lab tests to verify whether logging and SIEM rules trigger as expected.
Log & Telemetry Analysis
Analyzing host and network artifacts generated during offensive testing to build resilient detection logic.
Security Scripting & Automation
Writing scripts to automate IOC enrichment, parse raw logs, and streamline repeatable security workflows.
Offensive Security (Red Team)
Structured penetration testing across networks, Active Directory, and web applications.Network & Host Penetration Testing
Conducting structured enumeration, vulnerability assessment, and exploitation across Linux and Windows environments.
Active Directory Assessment
Identifying attack paths, ACL misconfigurations, Kerberoasting, and AS-REP roasting in domain environments.
Web Application Security Testing
Testing authentication flows, access controls, injection vectors, and server-side vulnerabilities.
Defensive Operations (Blue Team)
SIEM search construction, network traffic inspection, and system hardening.SIEM & Detection Rules
Building queries and correlation rules to detect credential dumping, lateral movement, and anomalous authentication.
Network Traffic & Packet Analysis
Inspecting PCAPs, analyzing protocol anomalies across SMB/LDAP/HTTP/DNS, and writing IDS signatures.
Endpoint & Domain Hardening
Applying practical remediations to close attack paths discovered during offensive exercises.
Home Lab Network Topology
Isolated multi-subnet virtual environment used to practice offensive techniques and validate SIEM detections.
Kali Linux Attack Box
Dedicated operator host used for internal network reconnaissance, Active Directory attack path enumeration, Kerberos ticket extraction, and web app testing.
corp.local Enterprise Lab
Windows Server Domain Controller (AD DS, DNS, Kerberos KDC), joined Windows 10/11 workstation, and Ubuntu Linux server running web and SSH services.
Splunk & Network IDS Collector
Central log collector ingesting Windows Security Events (4768, 4769, 4624), PowerShell ScriptBlock (4104), Sysmon telemetry, and Suricata network alerts.