____ __ __ _____ _____ __
/ __ \___ / // / ____ ___ ____/__ / |__ /____/ /
/ /_/ / _ \/ // /_/ __ \/ _ \/ ___/ / / /_ </ __ /
/ _, _/ __/__ __/ /_/ / __/ / / /_____/ / /_/ /
/_/ |_|\___/ /_/ / .___/\___/_/ /____/____/\__,_/
/_/reaper@re4perz3d:~$
Mohamed Bayrem Bane — SOC analyst with a strong offensive-security side.
I investigate attacks in the SOC, then run them in the lab. The bridge between the two — attack, detect, validate, improve — is what I build toward.
reaper@re4perz3d:~$
- soc-detection
- purple-team
- active-directory
- dfir
- threat-intel
reaper@re4perz3d:~$
[+] status: online — SOC → Purple → Red // always learning_
$ cat htb.stats
- rank
- Prodigy
- level
- 79
- machines
- 42
- sherlocks
- 54
- challenges
- 69
- season 9
- Ruby
full HTB profile →
$ ls certs/
eCTHP2026
Certified Threat Hunting Professional
eCIR2026
Certified Incident Responder
CRTP2026
Certified Red Team Professional
eCPPTv32026
Certified Professional Penetration Tester
eJPTv32025
Junior Penetration Tester
$ ls -l ~/projects
Supervisor (encadrant)
An autonomous pipeline that takes a CVE all the way to an evidence-based verdict: exact asset matching, reachability analysis, controlled exploitation in an isolated lab, and Wazuh detection validation — every trust boundary gated by human approval.
- NVD
- CISA KEV
- OSV.dev
- Gemini
- OpenAI
- Wazuh
- Python
Final-year project (ANCS)
An open-source SOC that automates the path from alert to context: Wazuh detects, Shuffle orchestrates, OpenCTI enriches from OTX and VirusTotal, and a local Mistral 7B writes the incident report — all surfaced in a custom Next.js dashboard I built.
- Wazuh
- Shuffle
- OpenCTI
- Mistral 7B
- FastAPI
- Next.js