After KAUST Academy
As of October 2026, Essam is an undergraduate student of cybersecurity at Imam Abdulrahman Bin Faisal University.
Summer project
Cybersecurity Specialization · Cohort 2026
APT-29 LOTL Adversary Emulation in Active Directory Environment, Threat Hunting, and Incident Response
This project focuses on safely emulating APT29-inspired attack techniques in an isolated Active Directory environment using MITRE CALDERA. The attack activities are monitored through Elastic Security, Sysmon, Windows Event Logs, and PowerShell logging. The project includes detection engineering, MITRE ATT&CK mapping, threat hunting using KQL/EQL, incident analysis, and remediation. The goal is to evaluate detection coverage, identify gaps, improve detection rules, and compare the environment before and after defensive hardening.
With KAUST Academy
- Cohort 2026
King Khalid University and University of Glasgow · Cybersecurity Summer School
Want your entry updated or removed? Contact us.