Pinned Loading

1. aws-detection-pipeline aws-detection-pipeline Public

   Real-time IAM role assumption abuse detection pipeline using AWS CloudTrail, EventBridge, Lambda, and DynamoDB — with SNS alerting and optional automated containment.

   Python 1

2. kc7-valdoria-investigation kc7-valdoria-investigation Public

   KQL-based incident response investigation tracing a phishing campaign through PowerShell persistence, SSH tunneling, document forgery, and data exfiltration on the KC7 platform

   1

3. intrusion_detection_system intrusion_detection_system Public

   Real-time ML-based Intrusion Detection System using LightGBM and flow-level traffic features — with live packet capture via TShark and a Flask + SocketIO alert dashboard.

   Python 1