Threat Intelligence Pipeline
Collects IOCs from URLhaus, Feodo Tracker and OpenPhish, enriches them via VirusTotal, maps findings to MITRE ATT&CK and forwards alerts to Wazuh/Splunk.
PythonWazuhSplunk
Berke Bodur
Cybersecurity candidate focused on blue team roles. I build SIEM/SOAR automation, threat intelligence tooling and do vulnerability research. Currently preparing for CompTIA Security+.
Projects
PhishGuard
CLI tool that analyzes email content with Gemini AI, verifies SPF/DKIM/DMARC and scans URL patterns to detect phishing and BEC attacks.
CLIGeminiATT&CK
CTI Bulletin
A self-updating threat intelligence bulletin that aggregates open-source feeds, summarizes them with AI and auto-publishes via GitHub Actions.
GitHub ActionsCI/CD
Patch Prioritization Dashboard
Aggregates CISA KEV and ENISA EUVD catalogs, enriches them with FIRST.org EPSS scores and ranks CVEs by patch urgency. Updated daily.
CISA KEVEPSSPages
Homelab & Honeypots
Honeypots on two VPS instances (Europe and US), with attack logs analyzed locally using Suricata, pfSense and Wazuh.
SuricatapfSenseWazuh
Vulnerability Research
I review open-source WordPress plugins using SVN version-diff analysis and static code review, and report confirmed findings to WPScan and VulDB (CNAs): Open Redirect, Broken Access Control and Unauthenticated Bypass.
CVE-2026-91020CVE-2026-88791
Skills & Education
- SIEM / IDS-IPS
- Splunk, Wazuh, Suricata
- Network & Identity
- pfSense, Active Directory, TCP/IP, DNS, HTTP/S, SMB, LDAP
- SOAR / Automation
- Splunk SOAR, Python, Bash, PowerShell
- Threat & Simulation
- MITRE ATT&CK, Threat Hunting, Atomic Red Team
- Certifications
- CompTIA Security+ (in progress) · Splunk SOC Essentials, Threat Hunting, SOAR Apps · TryHackMe Jr Pentester, SOC L1 · LetsDefend SOC Analyst
- Experience
- IT Support & Automation Specialist — Alemdar Call Center (2025)
- Education
- Computer Programming — Anadolu University (2024 – present)