A modular Python cybersecurity toolkit for network security assessment, vulnerability scanning, intrusion detection, email security analysis, and security monitoring.
Custom SOC pipeline with ELK stack, Logstash, Sigma rules, and Kibana dashboards for threat detection.
An AI-powered security system designed to enhance threat detection and system protection using machine learning techniques. Developed as part of an academic minor project.
Developed a log analysis system to detect security incidents, reconstruct attack timelines, and identify malicious activity using Linux and Windows logs, demonstrating blue-team threat detection and incident response skills.
ShdGuard is a passive defensive monitor for detecting suspicious activity on a PC and attributing incidents to attacker IPs. It monitors botnet C2 connections, open ports, inbound connections, Temp-folder programs and failed logons, with evidence sealing, reputation enrichment and optional phone alerts.
A Security Operations Center (SOC) Home Lab showcasing endpoint telemetry collection, detection engineering, threat hunting and incident investigation using ELK Stack, Sysmon and Winlogbeat.
Practical introduction to Security Information and Event Management (SIEM) and the Elastic Stack.
AWS Cloud Security Monitoring and Alerting Lab using CloudTrail, CloudWatch Logs, Metric Filters, Alarms and SNS.
OSINT WATCH is a security-focused intelligence monitoring platform that watches X accounts, Telegram public channels, and websites for configurable keywords. It provides source-linked alerts, live SSE dashboard feeds, proxy-aware fail-closed networking, SSRF protection, secrets redaction, live diagnostics, and multi-channel notifications.
Security Monitoring and Threat Detection using Wazuh SIEM
Proactive cybersecurity platform for real-time threat intelligence, incident management, automated threat analysis, alerting, and security monitoring using MISP, TheHive, Cortex, APIs, and Kibana.
Implemented AWS GuardDuty for threat detection, investigated critical IAM credential compromise findings, and documented incident response procedures.
Automated OSINT aggregation pipeline — pulls RSS, Reddit & Telegram, filters via rule-based relevance logic, delivers deduplicated intel digests
Hands-on Linux security labs covering system reconnaissance, access control, SSH hardening, network security, monitoring, and incident detection & response.
Built an Azure security lab that simulates attacks and puts detection, investigation, and incident response into practice using Microsoft Sentinel and Defender for Cloud.
Defensive ransomware detection and security monitoring platform with filesystem monitoring, threat scoring, incident response, file scanning, and a FastAPI dashboard.
Cloud-native Security Operations Center (SOC) built on AWS with real-time threat detection and automated alerting
An advanced cybersecurity system designed to monitor network traffic and system logs in real time, detect potential threats, and provide actionable insights. The project combines machine learning–based anomaly detection with rule-based techniques to identify suspicious activities such as unauthorized access and network attacks.
Hands-on SOC home lab for security monitoring, threat detection, SIEM alerting, and incident investigation using Splunk, Windows, Ubuntu and kali linux
To associate your repository with the securitymonitoring topic, visit your repo's landing page and select "manage topics."