Detection Rules
One detection library. Nine security platforms. No single-platform gaps.
PythonSigmaKQLSPL
View case study Open to security engineering opportunities
Security engineering that moves from signal to action.
I'm Wahid Hendrawan, a security engineer and product builder focused on detection engineering, threat hunting, DFIR, threat intelligence, vulnerability management, and secure infrastructure.
Indonesia - Working globally
Building practical tools for defendersOpen source - Security operations - Threat hunting
836Detection rules
9Security platforms
152ATT&CK techniques
7Active public products
Selected work
Products built around real security workflows.
From portable detection content to threat hunting workspaces and investigation platforms, each project is designed to reduce friction for security teams.
ThreatDock
A centralized platform for operational threat intelligence, hunting context, and security workflows.
JavaScriptThreat IntelligenceThreat HuntingDocker
View case study Forensis
Investigation tooling that brings evidence, triage, and response into one workspace.
PythonFlaskYARASigma
View case study YARA to Sigma
Translate malware intelligence into portable SIEM and EDR detections.
PythonYARASigmaFlask
View case study Capabilities
Security depth, product thinking, engineering discipline.
I work across the path from raw evidence and threat behavior to usable tooling, durable detection, hunting workflows, and secure delivery.
Detection Engineering
Sigma authoring, cross-platform translations, ATT&CK coverage, rule quality, and detection lifecycle thinking.
Threat Hunting
Hypothesis-driven hunts, IOC enrichment, ATT&CK mapping, evidence pivots, and analyst workflows for finding hidden threats.
DFIR & Threat Analysis
Log, network, and memory triage; evidence correlation; incident playbooks; and analyst-focused investigation tooling.
Security Platforms
Purpose-built dashboards and operational systems for vulnerability, intelligence, hunting, and SOC workflows.
Secure Infrastructure
Containerized delivery, multi-IaC workflows, system hardening, and security-conscious automation.
Wahid Hendrawan - Indonesia About
I build the tools I wish defenders already had.
My work sits at the intersection of security operations and software engineering. I turn recurring analyst problems into focused products, automation, and reusable open-source knowledge.
The common thread is practical impact: clearer evidence, stronger detection coverage, sharper threat hunting, faster investigation, and infrastructure that is easier to reason about.
Operational firstDesigned around the work analysts actually perform.
Portable by defaultBuilt to reduce vendor lock-in and single-platform gaps.
Evidence over claimsMeasured through shipped tools, releases, and coverage.