A compact, self-contained lab that demonstrates real-time intrusion detection and automated response using an IDS script (Scapy), Cisco router ACLs (Netmiko), and victim host hardening (Paramiko + iptables).

A modular Python-based SIEM/IPS that monitors system logs in real-time (Sentinel) and automates threat response (SOAR). It features Regex-based log normalization, hybrid event correlation (SSH/Web), and automated firewall blocking integrated with AbuseIPDB and Discord alerts.

NT405 - Cyber Security

PiNetCore - Production-ready Raspberry Pi 5 network appliance. Rust-based packet capture engine with modular plugin architecture, nftables firewall, and TypeScript/React dashboard. Features inline bridge mode, VPN integration (WireGuard/OpenVPN), IDS/IPS support, and centralized logging. Built for home labs and advanced network control.

A cloud-native security lab on AWS that automates threat detection and compliance enforcement. Deploys a 3-tier VPC with Suricata IDS/IPS, ModSecurity WAF, Duo MFA, WireGuard VPN, and ELK Stack — all provisioned via Terraform, configured with Ansible, and continuously validated with InSpec compliance-as-code checks.

Autonomous IDS/IPS with ensemble ML voting, post-quantum cryptography, Kubernetes Zero Trust, self-healing watchdog, and live SOC dashboard

Documentation of a ransomware security incident at a healthcare clinic using the 5 W's framework for incident handling and reporting.

SentinAI: A localized SOC toolkit and Hybrid IDS/IPS utilizing a dual-engine architecture (Heuristics + ML/IsolationForest) for real-time network threat detection.

Fully segmented home network with OPNsense, Suricata IDS/IPS, VLAN isolation, WireGuard VPN and TIG monitoring stack. Defense-in-depth architecture with 7 isolated zones.

Enterprise SOC home lab on AWS with Splunk SIEM, Wazuh EDR, Suricata IDS/IPS - 6 detection rules, 5 dashboards, MITRE ATT&CK mapped

piggy that sniff terror in the net :`0

Project on Grocery Chain Network using Cisco Packet Tracer

Automated network incident detection and response system. Suricata IDS/IPS, automated IP blocking, forensic analysis dashboard. Graded 10/10.

Complete network security checklist for audits and assessments. Covers firewall rules, network segmentation, access control, wireless security, VPN, and monitoring with CIS Controls mapping.

Projecte intermodular ASIX: Docker, Kubernetes, Helm, Istio, Ansible i Suricata IDS/IPS. Del contenidor local a la producció cloud-native amb ciberseguretat activa.

Real-time Network Traffic Analysis Engine capable of processing high-velocity data streams to detect statistical anomalies using Z-Score & Context-Aware filtering.

Wazuh Based IDS for localhost

Snort IDS/IPS rule generator — Flask web app with inline help tooltips, 12 detection templates, PCRE flag checkboxes, HTTP URI/Header matching, rule validation, and .rules file import/export

Step-by-step guide to building a SIEM system with Suricata IDS/IPS and Elastic Stack (Elasticsearch, Kibana, Filebeat) on Ubuntu 20.04.

Simulation d'une attaque APT sur un environnement Active Directory avec mesures de défense (prévention, détection, réponse).