identity:
name: "Omar Raif"
handle: "0x0MAr"
github: "0xfuz"
role: "Cybersecurity Technologies Engineering Student"
university: "Al-Farabi University"
mission:
- Build security tools that preserve evidence and support analyst decisions
- Understand systems from Linux internals to security operations
- Turn technical learning into tested, documented, usable projects
principle: "Understand the system. Preserve the evidence. Keep the analyst in control."
|
|
A self-hosted, evidence-first investigation and decision layer for security telemetry.
Telemetry → Canonical Alert → Deduplication → Correlation → Triage
→ Investigation → Evidence / Timeline / Entities / Indicators
→ MITRE / Attack Graph → Reviewable AI Suggestions → Analyst Decision
Aegis AI is my main engineering project. It sits above sources such as Wazuh and turns authorized telemetry into durable investigation context—without allowing AI output to silently become a security fact.
What is inside the system?
- Canonical alerts, deterministic deduplication, correlation, and triage
- Persisted evidence, timelines, entities, indicators, findings, and audit history
- Investigation overview, provenance views, and interactive attack graphs
- Analyst-controlled MITRE ATT&CK confirmation
- Optional local intelligence through Ollama with bounded, reviewable output
- FastAPI, SQLAlchemy, Alembic, Next.js, React Flow, PostgreSQL, Redis, and Docker
- Wazuh 4.9.2 integration validated end-to-end in a controlled environment
Note
Aegis AI is an independent private evaluator project. It is not an official Wazuh product, public SaaS, or autonomous security authority. Technical review access is available on request.
A safe, browser-only environment for learning how Linux permissions actually behave.
21 learning topics | 11 labs | 88 challenges | 113 quiz questions
27 simulated commands | 13 achievements | 154 automated tests
- Virtual terminal and filesystem—no backend and no real shell execution
- chmod, chown, ACLs, SUID/SGID, sticky bit, symlinks, chattr, su, and sudo
- Guided learning, saved progress, achievements, and certificate workflow
- Arabic and English interfaces with RTL support
- Vanilla JavaScript ES modules, GitHub Actions, and GitHub Pages
| Status | Certification | Issuer | Credential |
|---|---|---|---|
| ✅ | CRTA — Certified Red Team Analyst | CyberWarFare Labs | Verify |
| ✅ | AD-RTS — Active Directory Red Team Specialist | CyberWarFare Labs | Verify |
omar@0xfuz:~$ ./current-focus.sh
[RUNNING] Building and validating evidence-first investigation systems
[LEARNING] C/C++ systems programming and Linux internals
[TRACING] x86/x64 execution with GDB
[PRACTICE] Reverse engineering in controlled lab environments
[APPLYING] Active Directory and red-team foundations
[POLICY] Test it. Document it. Never hide the limitations.
$ status --identity 0x0MAr
$ status --mode learning | building | documenting
$ status --exit-code 0x00