A collection of cybersecurity projects, certifications, CTF challenges, and hands-on labs documenting my journey into offensive and defensive security.
Google Cybersecurity Professional Certificate (Coursera) — covering security fundamentals, incident response, Linux, SQL, and Python for security automation.
CyberSec Talent Week 2025 — Cyber Crisis Response Challenge simulating a ransomware attack on hospital IT infrastructure:
- Task 1: Malware analysis from network logs
- Task 2: Python script for infected host detection and isolation
- Task 3: AES key reconstruction and file decryption (AES-CBC)
- Task 4: Incident report and recovery strategy
- Task 5: Real-time network monitoring tool
🔬 Labs
Hands-on exercises from Google Cybersecurity program:
- SQL Filtering — Log analysis with SQL queries
- PASTA Worksheet — Threat modeling framework
- Parking Lot USB — Social engineering analysis
- Asset Inventory — Security asset management
- Penetration Testing Labs — Network scanning, exploitation, brute-force attacks
ret2libc Attack — Buffer overflow exploitation report inspired by a CTF challenge. Demonstrates binary exploitation techniques to bypass stack protections.
📺 Video Walkthrough on YouTube
Incident response documentation and completed exercises covering detection, containment, eradication, and recovery phases.
Writeups for TryHackMe rooms:
- SIEM Simulation — Security monitoring and log analysis
- Your First Hack — Introduction to penetration testing
Security audit documentation including completed assessments and original reference materials.
| Category | Tools |
|---|---|
| Penetration Testing | Nmap, Metasploit, Hydra, Burp Suite |
| Forensics & IR | Wireshark, Volatility, Log Analysis |
| SIEM & Monitoring | Splunk, ELK Stack |
| Scripting | Python, Bash, SQL |
| Exploitation | GDB, pwntools, ret2libc |
| Cryptography | AES, Key Recovery |
- Google Cybersecurity Professional Certificate
- CyberSec Talent Week 2025 Participant
- TryHackMe (ongoing)
Francesca Craievich
M.Sc. Computer Engineering @ University of Trieste
Robotics Engineer @ EY | Aspiring Cybersecurity Professional
