Udit Chhipa — Cyber Security & AI Systems Researcher

I research AV/EDR evasion in Rust, build LLM agentic investigation pipelines for law enforcement, and track cybercrime on the dark web.

By the numbers.

Concrete telemetry and verified milestones pulled straight from deployed research tooling and law enforcement prototypes.

11+ EDR/AV evasion techniques researched in NEBULA (syscalls stubs, AMSI/ETW bypass, module stomping)

26+ Sandbox & VM detection vectors verified across offensive threat emulation implants

190+ Countries mapped for geopolitical threat intel & BIN leak detection in PHANTOM-INTEL

6th★ Rank in university-wide CTF & Letter of Recommendation from Rajasthan Police HQ

Selected research & tooling (3)

Full forensic pipelines, threat emulation implants, and intelligence platforms built to solve real-world security challenges.

Rajasthan Police Research · 0→1 · 2026

teleguard-forensics-agent :: v2.4 [live]

[SCANNER] Target Channel: @underground_markets_alpha RISK 9.4 // CRITICAL

[OLLAMA-VISION] Frame 0492: Weapon detection confidence 98.2% WEAPON DETECTED

[DISCOVERY] Account rotation active · 14 channels queued · SQLite indexed PIPELINE HEALTHY

Python · Flask · Ollama · SQLite · Telegram OSINT

TeleGuard — Telegram Forensic Intelligence System

Built a local-first forensic pipeline that discovers, crawls, scans, and classifies underground Telegram channels for investigative review. Integrated local Ollama models (text and vision) for risk classification, evidence-based reporting, and criminal network analysis.

↑95% faster triage 100% local Ollama inference LoR Rajasthan Police HQ

Explore TeleGuard Architecture ↗

Threat Emulation · 2025 – Present

nebula-implant :: rust-x86_64-win

[SYSCALL] Direct NT syscall stubs loaded HOOK BYPASSED

[EVASION] Module stomping & PPID spoof VERIFIED

[C2-FALLBACK] Primary down → Dead-drop via GitHub FAILOVER OK

Rust · Windows API FFI · C · Threat Emulation

NEBULA — Threat Emulation & EDR Evasion

Researched modern EDR/AV detection gaps via an offensive threat-emulation implant exercising 11+ evasion techniques (AMSI/ETW patching, direct syscall stubs, module stomping, sleep/stack obfuscation) and 26+ VM sandbox checks. Studied multi-channel C2 with auto-fallback and companion Android implant in C.

11+ evasions 26+ sandbox checks

View Research Specs ↗

Threat Intel · 2024 – 2025

phantom-intel :: global-threat-matrix

[DARKWEB] BIN leak monitor active LEAK MITIGATED

[ATT&CK] T1071.001 Web Protocols mapped CORRELATED

[GEO] 190+ jurisdictions telemetry synchronized INGEST OK

Python · OSINT · AI/ML · MITRE ATT&CK

PHANTOM-INTEL — Threat Intelligence Platform

Automated dark web scraper and payment card leak tracker with MITRE ATT&CK attribution and geopolitical threat mapping across 190+ countries. Designed for early detection of financial fraud and compromised infrastructure.

190+ countries ATT&CK mapped

View Intelligence Matrix ↗

Two kinds of work

The core systems show how I investigate and defend. The side quests show what I explore when curiosity takes over.

Side quests (6)

tap any card for the problem & investigative thinking

Research prototypes built across law enforcement investigations, offensive labs, and competitive CTF arenas.

About

Researcher who likes to build & break.

I am pursuing a B.Tech in Computer Science (Cybersecurity) at Jaipur National University from 2023 to 2027. Since April 2024, I have been working as a Cyber Security Research Intern with Rajasthan Police (Cyber Crime Branch). I specialize in building offensive security tooling, AV/EDR evasion research, OSINT-driven investigations, and AI-powered defense systems.

Whether researching how direct syscall stubs bypass user-mode hooks or training local vision models to recognize contraband without transmitting suspect evidence to external cloud APIs, I care deeply about building sovereign, reliable tools that perform under adversarial conditions.

Now: 👮
Rajasthan Police (Cyber Crime Branch), Jaipur Cyber Security Research Intern · April 2024 – Present · Letter of Recommendation awarded
Previously: 🦊
ShadowFox Cyber Security Intern (Remote) · Web app vulnerability assessments & OSINT
Studying: 🎓
B.Tech in Computer Science (Cyber Security) Jaipur National University (JNU), Jaipur · 2023 – 2027
Toolkit: C, C++, Python, Rust, Docker, Linux, Git, Burp Suite, Wireshark, Ollama, Nmap Hover stack to fan out tools
Honors: 📜
Rajasthan Police HQ Letter of Recommendation & CTF Rank #6 Awarded for AI cybercrime investigation research and university-wide capture the flag

DEFEND RESEARCH & BUILD

By the numbers.

Selected research & tooling (3)

TeleGuard — Telegram Forensic Intelligence System

NEBULA — Threat Emulation & EDR Evasion

PHANTOM-INTEL — Threat Intelligence Platform

Side quests (6)

VLM Weapon Detection

Android C2 Implant in C

ShadowFox Vuln Lab

PCAP Threat Dissection

Ollama Crime Classifier

6th Rank CTF Suite

Researcher who likes to build & break.