securitymonitoring

An AI-powered security system designed to enhance threat detection and system protection using machine learning techniques. Developed as part of an academic minor project.

Developed a log analysis system to detect security incidents, reconstruct attack timelines, and identify malicious activity using Linux and Windows logs, demonstrating blue-team threat detection and incident response skills.

A Security Operations Center (SOC) Home Lab showcasing endpoint telemetry collection, detection engineering, threat hunting and incident investigation using ELK Stack, Sysmon and Winlogbeat.

Proactive cybersecurity platform for real-time threat intelligence, incident management, automated threat analysis, alerting, and security monitoring using MISP, TheHive, Cortex, APIs, and Kibana.

Practical introduction to Security Information and Event Management (SIEM) and the Elastic Stack.

AWS Cloud Security Monitoring and Alerting Lab using CloudTrail, CloudWatch Logs, Metric Filters, Alarms and SNS.

Custom SOC pipeline with ELK stack, Logstash, Sigma rules, and Kibana dashboards for threat detection.

Cloud-native Security Operations Center (SOC) built on AWS with real-time threat detection and automated alerting

Security Monitoring and Threat Detection using Wazuh SIEM

An advanced cybersecurity system designed to monitor network traffic and system logs in real time, detect potential threats, and provide actionable insights. The project combines machine learning–based anomaly detection with rule-based techniques to identify suspicious activities such as unauthorized access and network attacks.

SOC-style network monitoring platform built with Python, Flask, SQLite and Scapy for device discovery, trust management, security event logging and network security monitoring.

Hands-on Azure security portfolio demonstrating practical cloud security skills across identity protection, network security, security monitoring, threat detection, and incident response. This repository documents real-world security configurations, investigations, and defensive security practices using Microsoft security technologies.

Implemented AWS GuardDuty for threat detection, investigated critical IAM credential compromise findings, and documented incident response procedures.

Automated OSINT aggregation pipeline — pulls RSS, Reddit & Telegram, filters via rule-based relevance logic, delivers deduplicated intel digests