Wazuh SIEM Home Lab
Self-built detection lab: Wazuh manager + agents, log pipelines, and custom rules mapped to MITRE ATT&CK. Python tooling for alert triage.
View on GitHub ↗Blue Team Practitioner · Cybersecurity Instructor
I build, break, and defend — then document how.
I’m Mahfut Abdi (ZeroDayHakim) — a blue-team security practitioner and cybersecurity instructor. I work in detection engineering, threat hunting, and incident response, and I teach those skills to students from a range of backgrounds. This site is itself a security artifact — hardened headers, strict CSP, and a documented writeup of every choice.
Selected work
Projects & labs
Content Trust Platform
FastAPI service that analyzes writing for authenticity signals. CI-disciplined security-engineering project deployed on Render.
View on GitHub ↗Audio-Deepfake Defense Lab
Defensive research into voice-cloning detection, built under a documented rules-of-engagement charter with safety-first design.
View on GitHub ↗Technical writing
Writeups
Detection walkthroughs, incident investigations, and the Hardening Notes for this very site — documenting the CSP, HSTS, and email-authentication decisions — land here. This section is wired for Markdown/MDX content as the next build step.
Background
About
I’m a blue-team practitioner and cybersecurity instructor with close to four years in the field. My work spans detection engineering, threat hunting, and incident response — building home labs (a Wazuh SIEM with custom detections mapped to MITRE ATT&CK), automating alert triage in Python, and teaching those skills to students from newcomers to working professionals.
Before security, I spent five years running humanitarian programs in high-stakes, resource-constrained environments — coordinating teams, managing risk, and documenting everything under pressure. Those instincts map directly onto security operations: triage, evidence discipline, and clear incident communication. I hold the Google Cybersecurity Professional Certificate, and I learn by building — labs, detection rules, and automation — not by memorizing.