Hippolyte C.

I design cyber threat detection engines by integrating AI and machine learning approaches into security pipelines.

I have developed or contributed to developing:

- Detection of DGA-generated domains (RandomForest n-grams) integrated into an engine to detect bursts over a time window;

- Phishing identification through HTML page analysis (XGBoost);

- Authentication log scoring: behavioral modeling on Windows logs (Sysmon, Event IDs) to detect abnormal access via anomaly models (Isolation Forest, OCSVM);

- LLM integration in SOC pipelines: alert enrichment and contextualization.

CTI Projects:

- Malware clustering by TLSH similarity: automatically group malware by code proximity and map their associated infrastructures.

- CTLog monitoring: real-time monitoring of new TLS certificates issued to detect phishing and typosquatting targeting states.

Target Audience:

- Security solution providers;

- SOCs;

- Cyber R&D teams;

- Organizations looking to industrialize their detection or integrate AI into their security pipelines.