loganalysis

GreenLogAudit is a simple, modern log auditing system that is very quick to deploy and can even be run from a USB drive. It can be run by double-clicking and performs sysog log collection and auditing within one second.

Shaley-Sand Log Analysis Tutorial using Waxman-Smits and Dual-Water

Webhawk/Catch helps automatically finding web attack traces in logs

Django middleware and signals for handling security events

[ESEC/FSE'23] Hue: A User-Adaptive Parser for Hybrid Logs

A cybersecurity solution that leverages the power of artificial intelligence and machine learning to accurately classify incoming network traffic based on the tactics employed by potential attackers. The system is trained using data gathered from a Cowrie honeypot deployed in the cloud.

"GuardianEye 🌐🔒: Empowering Cybersecurity with Advanced Keylogger – A robust defense system providing comprehensive monitoring of employee activities, capturing keystrokes, screenshots, application logs, and system logs for proactive threat detection and enhanced security insights in modern business operations. 🛡️💻

grep and anew for Windows

This repository is not maintained. For the latest information, please refer to qsv-rs, which is a complete reimplementation in Rust.

Efficient CSV triage with three-level flags.

30+ projects AWS SOC/SOAR Ecosystem portfolio with Wazuh, TheHive, Cortex, MISP, n8n, network security monitoring, Threat Detection & Hunting, Alert triage, Log Analysis, Detection engineering, Incident Response, dashboards, and AI security automation.

Basic Windows Sysmon log analysis for security monitoring and threat detection

SOC investigation of Splunk BOTS v1, analyzing reconnaissance, credential attacks, vulnerability scanning, and IDS detection gaps using SPL and MITRE ATT&CK.

Built a SIEM solution using Splunk for centralized log management, real-time security monitoring, threat detection, dashboard creation, and incident analysis using SPL queries.

A python script to search a file for the user input | Return the previous, current and next line of the searched input | Write the current line into a new file

Kubernetes configurations for deploying Elasticsearch and Kibana. Simplify log analysis with this scalable and efficient setup.

KQL-based incident response investigation tracing a phishing campaign through PowerShell persistence, SSH tunneling, document forgery, and data exfiltration on the KC7 platform

Real-time SSH brute-force and password spraying detection engine written in Go.

Estimating formation total porosity using Archie's Equation

Developed a log analysis system to detect security incidents, reconstruct attack timelines, and identify malicious activity using Linux and Windows logs, demonstrating blue-team threat detection and incident response skills.