Enterprise Security Data Pipeline Platform (SDPP) with Integrated Real-Time Threat Detection Engine

A document tagging library

Real-time container threat detection, automated defense, and forensic evidence collection.

Ferramenta CLI em Python para análise de logs de segurança com isolamento por projeto, detecção de ameaças via assinaturas regex e gerenciamento de IPs maliciosos.

Machine Learning based Network Intrusion Detection System with real-time packet analysis and MERN dashboard.

🛠️ Build and manage AI agents easily with Agent Hub, a versatile platform integrating TypeScript, Python, Angular, and FastAPI for seamless development.

AI-Powered SOC Threat Hunting Platform | Sysmon + Python Detection Engine + Machine Learning (Isolation Forest) + VirusTotal Enrichment + Flask Dashboard

Modular Linux attack timeline detection engine with MITRE ATT&CK mapping and CI-backed test suite.

GUARDIUM is an intelligent Wazuh rule optimization framework designed to reduce false positives, improve alert accuracy, and assist SOC teams in maintaining high-quality SIEM detections. GUARDIUM combines rule analysis, threat context, and Large Language Models (LLMs) to automatically evaluate, explain, and optimize Wazuh rules.

SOC home lab using Elastic SIEM: endpoint logging, detections (KQL), and incident reports.

A real-time Security Information and Event Management (SIEM) system featuring a multi-stage heuristic detection engine, automated IP enrichment via VirusTotal/IP-API, and a live Streamlit SOC dashboard for visualizing global threat telemetry.