Security Analyst at Capgemini working across threat intelligence, DFIR, and SOC operations. Previously email security & threat intel at Qubit Capital — investigating phishing and BEC at scale (250+ incidents across 1,300+ domains and 2,700+ inboxes) and automating the toil away with n8n SOAR pipelines that cut response time from 4 hours to 75 minutes. M3AAWG member, earlier infra + email security at UnifyCX.
- Email security — SPF/DKIM/DMARC at scale, BEC, phishing forensics, lookalike-domain takedowns
- Threat intelligence — IOC enrichment, campaign tracking, adversary profiling, finished intel
- Detection engineering — YARA, Sigma, STIX/TAXII, MITRE ATT&CK mapping
- AI security — AI threat research, agentic threat modeling, prompt-injection defense, non-human identity
| pranithjain.qzz.io | My portfolio — background, experience, certifications, case studies, and the reasoning behind everything below |
Each of these is a standalone repo, usable on its own:
| Repo | What it is |
|---|---|
| dfir-threat-intel-platform | The main platform — 135+ DFIR tools, live self-updating CTI feeds, and a 332-tool MCP server on one Cloudflare Workers deploy. MIT. |
| dfir-mcp-server | Standalone MCP server — 400+ DFIR & threat-intel tools for AI agents, Claude Desktop / Cursor ready |
| dfir-threat-intel-agent | Autonomous LLM investigator — plans, calls intel tools in parallel, QA-verifies, synthesizes cited reports |
| cti-cli | Threat intel from the terminal — AI copilot, 65+ provider IOC checks, feed monitoring |
| dfir-cli | Offline-first DFIR commands — IOC extraction, hashing, PE analysis, encoding |
| cti-ai-skills | CTI skills for Claude Code, Cursor & Codex |
| dfir-ai-skills | DFIR investigation skills for AI coding assistants |
I also run pranithjain.qzz.io live — DFIR toolkit + threat-intel platform, free at the edge, no signup. The portfolio and the platform are separate surfaces on that one deploy.
Operating — hourly CTI sync pipelines: ransomware tracking, CVE/KEV, IOC firehose, actor dossiers
Exploring — AI threat research + AI security: agent containment failures, non-human identity risk, MCP audit surfaces
Publishing — auto-generated daily/weekly intel briefings + case-study deep dives on the blog
