Pinned Loading

1. nmap-network-recon nmap-network-recon Public

   Network reconnaissance and vulnerability scanning using Nmap — host discovery, port scanning, OS fingerprinting, NSE vulnerability detection, and automated reporting against Metasploitable 2

   Shell 1

2. threat-intel-enricher threat-intel-enricher Public

   Python SOC automation toolkit — ingest Suricata IDS alerts, enrich IOCs against multiple threat intel APIs concurrently, score risk with weighted multi-source algorithm, correlate attack campaigns,…

   Python

3. suricata-ids-rules suricata-ids-rules Public

   Network intrusion detection with Suricata — custom detection rules, PCAP analysis, threat intel integration, and alert automation demonstrating layered detection with ET Open community rules

   Shell

4. splunk-siem-analysis splunk-siem-analysis Public

   SIEM threat detection with Splunk — SPL queries, security dashboards, automated alerts, and attack timeline reconstruction using the BOTS v1 dataset

5. wireshark-threat-detection wireshark-threat-detection Public

   Network threat detection and traffic analysis using Wireshark — DNS tunneling detection, TLS fingerprinting with JA4, C2 beacon identification, and automated analysis with TShark

   Shell