Hicham Intazga

– Requirement analysis for SOC and Threat Intelligence systems and design of the overall platform architecture. – Installation and configuration of MISP for managing and correlating Indicators of Compromise (IOC/CVE). – Development of a multi-source data collection pipeline and regex-based extraction modules. – Integration of external enrichment sources (VirusTotal, URLScan, MITRE ATT&CK) and synchronization with MISP. – Automated collection of Telegram channel messages and extraction of attached files. – AI-based analysis for leak detection and classification by type, severity, and target organization. – Development of a dashboard to visualize CTI pipeline stages (collection, enrichment, analysis, alerting). – Automated generation of security bulletins in text and PDF formats using LLM-based reporting.

– Development of a monitoring application using REST API, PHP, MySQL, and Flutter for data centralization.