Pinned Loading

1. elastic-siem-lab elastic-siem-lab Public

   Elastic Security SIEM on Elastic Cloud: Windows EDR + DMZ nginx onboarded via Fleet, 5 custom KQL/EQL/threshold detections mapped to MITRE ATT&CK, Atomic Red Team validation (6/8 to 8/8 coverage), …

2. llm-alert-triage llm-alert-triage Public

   AI-assisted Tier 1 alert triage for Wazuh. Claude Haiku verdicts with deterministic guardrails, prompt-injection defense, and a measured evaluation (96% → 100% analyst agreement, 0 missed threats).

   Python

3. MICROSOFT-SENTINEL-SOC-LAB MICROSOFT-SENTINEL-SOC-LAB Public

   A hands-on Security Operations Center (SOC) home lab built on Microsoft Azure and Microsoft Sentinel, designed to simulate real-world threat detection, incident response, and threat hunting in a cl…

4. soar-auto-containment soar-auto-containment Public

   Human-in-the-loop SOAR: Elastic alert, AbuseIPDB/VirusTotal enrichment, Slack approval, and an on-prem Python relay that blocks the attacker on FortiGate via a least-privilege REST API, then opens …

   Python

5. AWS-Misconfiguration-hunt AWS-Misconfiguration-hunt Public

   Hunted AWS misconfigurations with Prowler against CIS 7.0: baselined the account, planted 5 realistic misconfigs, measured scanner detection and blind spots, and remediated with AWS CLI. High findi…

   HTML

6. Cisco-Network-Design Cisco-Network-Design Public

   This repository contains a series of hands-on network infrastructure projects designed and configured using Cisco Packet Tracer. Projects demonstrate practical implementation of enterprise networki…