Skip to content
View john-danko-cyber's full-sized avatar
0 followers · 15 following

Block or report john-danko-cyber

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
john-danko-cyber/README.md

John Danko

Cybersecurity graduate based in Greater Philadelphia pursuing an SOC Analyst role, with hands-on practice in SIEM, log analysis, network traffic analysis, and incident response.

  • B.S. in Computer Information Science, Cybersecurity Specialization, Gwynedd Mercy University (Cum Laude, Fall 2024)
  • Competed in the DoD Cyber Sentinel Skills Challenge (Correlation One, June 2025) in forensics, malware and reverse engineering, networking and recon, OSINT, and web security
  • Wrote a malware incident response case study, SOC playbooks for five alert types, and incident reports from provided tcpdump and Wireshark logs
  • Building hands-on skills in Splunk and Google Security Operations through SOC labs

Tools: Splunk, Google Security Operations, Microsoft Defender, Wireshark, tcpdump, Nmap, Nessus, Metasploit, Burp Suite, FTK Imager, Autopsy, John the Ripper, pfSense
Frameworks: NIST SP 800-61, NIST CSF, MITRE ATT&CK, Cyber Kill Chain
Languages: Python, Bash, C++, Java, SQL, HTML, JSON

📫 LinkedIn | Portfolio Website | Download Resume

Pinned Loading

  1. Malware-Incident-Response Malware-Incident-Response Public

    Real-world incident response case study: detecting and containing DLL-sideloaded malware with registry and scheduled-task persistence on a Windows PC.

  2. SOC-Incident-Response-Playbook SOC-Incident-Response-Playbook Public

    Original SOC incident response playbooks for phishing, malware, brute force, ransomware, and suspicious logins, based on NIST SP 800-61 and MITRE ATT&CK.

  3. website-redirect-malware-analysis website-redirect-malware-analysis Public

    Google Cybersecurity Certificate lab: tcpdump analysis of a website redirect to a malicious lookalike site

  4. syn-flood-attack-analysis syn-flood-attack-analysis Public

    Analysis of a SYN flood DoS attack from a Wireshark TCP/HTTP log (Google Cybersecurity Certificate project)

  5. dns-icmp-traffic-analysis dns-icmp-traffic-analysis Public

    Network traffic analysis of a DNS/ICMP incident using tcpdump (Google Cybersecurity Certificate project)

  6. cybersecurity-framework-incident-response cybersecurity-framework-incident-response Public

    NIST CSF incident report analysis of an ICMP flood DoS attack on a multimedia company's network (Google Cybersecurity Certificate project).