Mostafa Moradian

@mosi.bsky.social

59 Followers 53 Following

Lead Security Engineer at Tiger Data | Securing and shipping cool stuff

Before-and-after architecture diagram titled "RSigma v0.20.0: the IR backbone." Before (v0.19): Sigma YAML flows through a Parser, then fans out to four consumers (eval, PostgreSQL, LynxDB, Fibratus) that each re-resolve modifiers. After (v0.20): a single central IR (HIR) hub takes Sigma rules and, newly, SIEM queries, and feeds eval, byte-identical convert backends, an HIR cache, and a new reverse-to-Sigma path.
Two interlocking circles labeled Engineer and Operate around RSigma. Engineer: Author (rule draft, lint, ADS metadata, LSP, MCP), Test (explain, backtest, pipeline diff), Deploy (rsigma-action CI gate, hot-reload, signed builds). Operate: Detect (daemon, correlation, schema routing), Alert & Triage (enrichment, risk, dedup, webhooks), Measure (ATT&CK coverage, DeTT&CT visibility, scorecard, hygiene). Hunt (backend convert, sigma-cli delegation) bridges back: findings feed new rules.
The RSigma logo, an orange and black tiger-striped lowercase "r" and Greek sigma monogram above the wordmark "RSigma", with the tagline "Complete Sigma Detection Toolkit: Parser, Linter, Evaluator, Correlation Engine, Conversion Framework, Streaming Daemon and LSP Server" beneath it on a white background.
Screenshot of a Grafana Labs blog post by Mostafa Moradian titled "Canary tokens: Learn all about the unsung heroes of security", explaining how canary tokens help detect breaches early and secure infrastructure.
Screenshot of Detection Engineering Weekly newsletter featuring an article by Mostafa Moradian on using canary tokens at Grafana Labs for detecting code leaks.
The GitHub social preview card contains information about the mostafa/xk6-kafka repository, its logo, and its description.
GitHub contributions chart of year 2023 with 3793 contributions on my account https://github.com/mostafa.
Screenshot of a GitHub pull request containing details of the code changes, comments, author, project and related information.
The GitHub social preview card contains information about the mostafa/xk6-kafka repository, its logo, and its description.
The GitHub social preview card contains information about the mostafa/xk6-kafka repository, its logo, and its description.