GreenLogAudit is a simple, modern log auditing system that is very quick to deploy and can even be run from a USB drive. It can be run by double-clicking and performs sysog log collection and auditing within one second.

Webhawk/Catch helps automatically finding web attack traces in logs

Shaley-Sand Log Analysis Tutorial using Waxman-Smits and Dual-Water

Django middleware and signals for handling security events

[ESEC/FSE'23] Hue: A User-Adaptive Parser for Hybrid Logs

A cybersecurity solution that leverages the power of artificial intelligence and machine learning to accurately classify incoming network traffic based on the tactics employed by potential attackers. The system is trained using data gathered from a Cowrie honeypot deployed in the cloud.

grep and anew for Windows

"GuardianEye 🌐🔒: Empowering Cybersecurity with Advanced Keylogger – A robust defense system providing comprehensive monitoring of employee activities, capturing keystrokes, screenshots, application logs, and system logs for proactive threat detection and enhanced security insights in modern business operations. 🛡️💻

This repository is not maintained. For the latest information, please refer to qsv-rs, which is a complete reimplementation in Rust.

Efficient CSV triage with three-level flags.

30 + project AWS SOC/SOAR Ecosystem portfolio with Wazuh, TheHive, Cortex, MISP, n8n, network security monitoring, Threat Detection & Hunting, Alert triage, Log Analysis, Detection engineering, Incident Response, dashboards, and AI security automation.

Basic Windows Sysmon log analysis for security monitoring and threat detection

A python script to search a file for the user input | Return the previous, current and next line of the searched input | Write the current line into a new file

Kubernetes configurations for deploying Elasticsearch and Kibana. Simplify log analysis with this scalable and efficient setup.

Developed a log analysis system to detect security incidents, reconstruct attack timelines, and identify malicious activity using Linux and Windows logs, demonstrating blue-team threat detection and incident response skills.

Real-time SSH brute-force and password spraying detection engine written in Go.

Estimating formation total porosity using Archie's Equation

Smart dashboard developed in MS Power BI to analyze and monitor logs of a specific bank department

Windows Event Log investigation for threat detection | Sysmon analysis, log correlation, and security event monitoring

MCP server plugin for COVESA DLT Viewer - enables AI agents to query and analyze DLT log files.