┌──[ INTEL-REPORT // CLASSIFIED: OPEN-SOURCE ]──────────────────┐
│ CODENAME .......... APT-AHMED │
│ REAL_NAME ......... Ahmed BARGADY │
│ ORIGIN ............ Morocco 🇲🇦 │
│ FIRST_OBSERVED .... 2019 (commit hash: a17d3f...) │
│ STATUS ............ ACTIVE ▮▮▮▮▮▮▮▮▮▮ 100% │
│ SECTOR ............ Academia · Cybersecurity · AI Research │
│ MOTIVATION ........ curiosity · open-source · ☕ │
│ THREAT_LEVEL ...... HIGH-CURIOSITY ⚠ │
└───────────────────────────────────────────────────────────────┘
|
+ Detect stealthy multi-stage APTs
+ Reason over MITRE ATT&CK with LLMs
+ Open-source an APT benchmark
+ Publish first PhD paper (2026)
! Sleep more
- Boring dashboards
|
RECON → WEAPONIZE → DELIVER → EXPLOIT → INSTALL → C2 → ACTIONS vs. 🛡️ AI · Graphs · LLMs
Detecting stealthy, multi-stage attackers (APTs) inside enterprise telemetry
with graph-based and LLM-assisted anomaly detection.
| 🧠 Direction | 🔬 What I'm exploring |
|---|---|
| Provenance Graphs | Lateral-movement detection via temporal GNNs |
| LLM-augmented SOC | Reasoning over alerts, MITRE ATT&CK mapping |
| Adversarial Robustness | Evasion attacks on EDR/ML detectors |
| Benchmarks & Data | Reproducible APT datasets for the community |
