securitymonitoring

A modular Python cybersecurity toolkit for network security assessment, vulnerability scanning, intrusion detection, email security analysis, and security monitoring.

Developed a log analysis system to detect security incidents, reconstruct attack timelines, and identify malicious activity using Linux and Windows logs, demonstrating blue-team threat detection and incident response skills.

An AI-powered security system designed to enhance threat detection and system protection using machine learning techniques. Developed as part of an academic minor project.

Hands-on SOC home lab for security monitoring, threat detection, SIEM alerting, and incident investigation using Splunk, Windows, Ubuntu and kali linux

Practical introduction to Security Information and Event Management (SIEM) and the Elastic Stack.

A Security Operations Center (SOC) Home Lab showcasing endpoint telemetry collection, detection engineering, threat hunting and incident investigation using ELK Stack, Sysmon and Winlogbeat.

ShdGuard is a passive defensive monitor for detecting suspicious activity on a PC and attributing incidents to attacker IPs. It monitors botnet C2 connections, open ports, inbound connections, Temp-folder programs and failed logons, with evidence sealing, reputation enrichment and optional phone alerts.

SOC-style network monitoring platform built with Python, Flask, SQLite and Scapy for device discovery, trust management, security event logging and network security monitoring.

Custom SOC pipeline with ELK stack, Logstash, Sigma rules, and Kibana dashboards for threat detection.

Security Monitoring and Threat Detection using Wazuh SIEM

AWS Cloud Security Monitoring and Alerting Lab using CloudTrail, CloudWatch Logs, Metric Filters, Alarms and SNS.

OSINT WATCH is a security-focused intelligence monitoring platform that watches X accounts, Telegram public channels, and websites for configurable keywords. It provides source-linked alerts, live SSE dashboard feeds, proxy-aware fail-closed networking, SSRF protection, secrets redaction, live diagnostics, and multi-channel notifications.

Proactive cybersecurity platform for real-time threat intelligence, incident management, automated threat analysis, alerting, and security monitoring using MISP, TheHive, Cortex, APIs, and Kibana.

Implemented AWS GuardDuty for threat detection, investigated critical IAM credential compromise findings, and documented incident response procedures.

Automated OSINT aggregation pipeline — pulls RSS, Reddit & Telegram, filters via rule-based relevance logic, delivers deduplicated intel digests

Hands-on Linux security labs covering system reconnaissance, access control, SSH hardening, network security, monitoring, and incident detection & response.

Built an Azure security lab that simulates attacks and puts detection, investigation, and incident response into practice using Microsoft Sentinel and Defender for Cloud.

Defensive ransomware detection and security monitoring platform with filesystem monitoring, threat scoring, incident response, file scanning, and a FastAPI dashboard.

Cloud-native Security Operations Center (SOC) built on AWS with real-time threat detection and automated alerting

Security monitoring prototype for federated learning | HMAC audit logging, filesystem integrity monitoring, STRIDE threat modeling & Grafana