Translating technical incidents into geopolitical context and policy-relevant insights for national and international security.
Hello! I am Preet Kapoor, a Cyber-Threat Diplomacy Researcher working at the intersection of cybersecurity, open-source intelligence, and strategic affairs.
My work focuses on analyzing cyber incidents, threat actors, vulnerabilities, and digital infrastructure, then connecting technical evidence with geopolitical, organizational, and policy implications.
I build intelligence tooling, produce structured research briefs, and study how emerging cyber threats affect India’s security interests and the wider international landscape.
Conducted OSINT-based research into cyber incidents, threat actors, vulnerabilities and infrastructure relevant to Indian organizations.
Analyzed threat indicators using IOC correlation, MITRE ATT&CK mapping and open-source intelligence.
Produced research reports translating technical cyber incidents into strategic, geopolitical and organizational implications.
Built automated tooling to collect, structure and visualize threat intelligence for rapid analysis.
OSINT Recon — Automated Python-based OSINT reconnaissance across 30+ platforms for 100+ users, reducing account discovery time by ~70% through multi-threaded collection.
Analysis — Correlated discovered identities, accounts, and digital traces through recursive enrichment to identify exposure patterns, account linkages, and potential security risks.
Reporting — Produced structured JSON-based intelligence reports summarizing findings, digital exposure, associated risks, and recommended remediation measures.
Awareness — Led a 5-member team delivering practical cyber-hygiene guidance to non-technical users, including MFA adoption, 12+ character password standards, and segregation of professional and temporary digital identities.
Research connecting cyber operations, strategic policy, and state-level security considerations.
Structured threat-intelligence research focused on turning technical evidence into clear analytical findings.
India-focused research mapping active cyber threats to defensive actions, mitigations, and remediation guidance.
A chronological view of significant cyber-threat activity affecting India, organized for rapid strategic and historical analysis.
A unified threat-intelligence workspace for IOCs, malware and file analysis, vulnerabilities, phishing, infrastructure, MITRE ATT&CK techniques, geography, and threat trends.
An advanced reconnaissance and offensive automation framework designed to streamline target analysis, asset discovery, OSINT, and vulnerability-assessment workflows.
A unified security toolkit blending VirusTotal scanning, local phishing detection, file and URL threat analysis, and password-policy checks under one workflow.
Hands-on vulnerable-machine work focused on enumeration, exploitation, privilege escalation, and the reasoning behind each attack path.
Structured PortSwigger Web Security Academy notes and lab solutions covering modern web exploitation techniques and methodology.
Defensive notes covering detection engineering, SIEM concepts, incident response, hardening, and practical security operations.