Muhammad Moiz Arshad

💫 About Me

🔭 I work in security operations and incident response, focused on understanding how systems break, how attackers think, and how defenders can build better visibility when things go wrong.

Most of my work revolves around detection engineering, threat hunting, incident response, and making security operations less noisy and more meaningful.

🔬 Current Focus

Mapping attacker behavior to real-world telemetry
Understanding gaps between detection logic and actual incident patterns
Exploring lightweight automation for security operations
Building better mental models for cloud and endpoint attack paths
Experimenting with detection engineering ideas inspired by real-world incidents, research, and conference learnings

🌱 Areas of Interest

Breaking down security incidents to understand the “why” behind them
Finding meaningful signal in large-scale security data
Improving detections so they reflect attacker behavior rather than assumptions
Threat hunting driven by hypotheses, not dashboards
Making security operations more efficient through automation

✍️ Writing & Contributions

Contributor to MITRE ATT&CK Framework
Occasional writing on malware analysis, document-based attacks, and defensive security topics
Always learning through investigations, labs, conference talks, and hands-on experimentation

🤝 Open To

Security research collaborations
Detection engineering discussions
Threat hunting experiments
Open-source security projects
Knowledge sharing within the security community

💬 Outside Security

Travel, photography, music, and capturing places through film.

⚡ Fun Fact

I enjoy learning languages and have somehow accumulated pieces of around 6–7 of them over the years — enough to start conversations in places where I probably shouldn’t be overly confident.