🚨 Michael Twining — Cybersecurity Portfolio Overview

Welcome! This is a curated summary of my public GitHub repositories, organized by focus area. My work spans malware analysis, threat intelligence, digital forensics, AI in cybersecurity, and hands-on tooling.

---

🦠 Malware Analysis

🔬 Reverse engineering, behavior mapping, and threat tracking across prominent malware families:

• 🔗 TrickBot-Analysis
  Comprehensive research on TrickBot’s evolution from banking trojan to ransomware enabler. Includes ATT&CK mapping and reverse engineering.

• 🛡️ LokiBot-Malware-Analysis
  Static and behavioral analysis using FlareVM, REMnux, VirusTotal, and Hybrid Analysis.

• 🧬 Static-Malware-Analysis
  Labs on Emotet and keyloggers using VirusTotal, PEStudio, and MITRE ATT&CK.

• 🌐 Malware-Network-Analysis
  PCAP-based CryptoLocker and Word-Dropper analysis. Focus on HTTP/DNS/TLS artifacts.

• 💣 Malware-Classification-Qilin
  Comparative malware analysis with Qilin ransomware case study.

• 🧠 Conti-Leak-Analysis
  Threat actor profiling from leaked chat logs, C2 infrastructure, and playbook breakdown.

---

🔍 Digital Forensics & Incident Response

🧾 Forensic reports and breach simulations with focus on evidence recovery and response:

• 🧰 Digital-Forensics-Labwork
  Linux forensics with SleuthKit, E3, Auditd, cron logs, and artifact reconstruction.

• 🚨 Cyber-Incident-Alert-Breach
  Simulated university alert system breach: walkthrough of attacker actions and defensive response.

---

🧠 AI in Cybersecurity

🤖 Research and tool development at the intersection of artificial intelligence and infosec:

• 🧵 AI-Cybersecurity-Research
  NIST AI RMF, OWASP Top 10 for LLMs, MITRE ATLAS, and ethical AI implications.

• 🗂️ ResearchAI
  NLP-powered tool for querying PDFs, Word docs, spreadsheets, and URLs with Gemini API.

---

📊 Risk & Governance

📋 Framework-based strategies for identifying and mitigating cyber risk:

• 🛠️ Cyber-Risk-Management-Plan
  NIST 800-53 based risk identification, controls mapping, and mitigation planning.

---

⚙️ Security Tools & Utilities

🔧 Custom-built Python tools for network testing and security operations:

• 🧪 SimplePort
  TCP port scanner with real-time output, timestamped logs, and customizable scanning range.

---

🎓 Academic Highlights

📘 Educational background and coursework in Cyber Operations:

• 🎓 course-highlights
  Summary of B.S. in Cybersecurity (Utica University). Topics: AI, malware, OSINT, Python.

---

📚 Miscellaneous

🌐 Personal references, favorite links, and portfolio root files:

• 🧭 QuickResources
  Continuously evolving index of cybersecurity tools and learning resources.

• 📄 README
  Overview README linking to the rest of this portfolio.

---

🔗 Let’s Connect

📫 LinkedIn
📺 YouTube
🧠 Back to Profile README →

---

© 2025 Michael Twining