securitymonitoring

Developed a log analysis system to detect security incidents, reconstruct attack timelines, and identify malicious activity using Linux and Windows logs, demonstrating blue-team threat detection and incident response skills.

An AI-powered security system designed to enhance threat detection and system protection using machine learning techniques. Developed as part of an academic minor project.

AWS Cloud Security Monitoring and Alerting Lab using CloudTrail, CloudWatch Logs, Metric Filters, Alarms and SNS.

A Security Operations Center (SOC) Home Lab showcasing endpoint telemetry collection, detection engineering, threat hunting and incident investigation using ELK Stack, Sysmon and Winlogbeat.

Custom SOC pipeline with ELK stack, Logstash, Sigma rules, and Kibana dashboards for threat detection.

Practical introduction to Security Information and Event Management (SIEM) and the Elastic Stack.

SOC-style network monitoring platform built with Python, Flask, SQLite and Scapy for device discovery, trust management, security event logging and network security monitoring.

Security Monitoring and Threat Detection using Wazuh SIEM

Cloud-native Security Operations Center (SOC) built on AWS with real-time threat detection and automated alerting

Implemented AWS GuardDuty for threat detection, investigated critical IAM credential compromise findings, and documented incident response procedures.

Automated OSINT aggregation pipeline — pulls RSS, Reddit & Telegram, filters via rule-based relevance logic, delivers deduplicated intel digests

An advanced cybersecurity system designed to monitor network traffic and system logs in real time, detect potential threats, and provide actionable insights. The project combines machine learning–based anomaly detection with rule-based techniques to identify suspicious activities such as unauthorized access and network attacks.

Hands-on Azure security portfolio demonstrating practical cloud security skills across identity protection, network security, security monitoring, threat detection, and incident response. This repository documents real-world security configurations, investigations, and defensive security practices using Microsoft security technologies.