event-log-analysis

A modern Flet-based UI for PM4PY that enables process mining, discovery, conformance checking, filtering, and analysis of event logs without writing code.

Process Mining analysis using Disco - Discovery, Conformance Checking & Enhancement

Open-source tools, examples, and integrations for measuring workflow friction, handoff delays, and SaaS customer onboarding performance.

Advanced Windows Event Log threat hunter in pure PowerShell — Sigma-subset detection, correlation engine, per-entity risk scoring, self-contained HTML reports. Zero dependencies, air-gap ready.

This project aims to redesign Windows audit policy configurations to reduce log noise and enhance detection clarity within Splunk. The objective is to produce a streamlined, purposeful audit policy that supports effective threat detection, baselining, and investigative workflows in a lab or SOC simulation environment.

BeCode AD lab on Azure : build, harden, detect. 11 MITRE techniques, 11/11 detection rate. External credential-stuffing capture as real-world validation.

Detection and investigation of potential Windows brute-force activity using Splunk and Windows Event ID 4625.

A Windows Event Viewer investigation analyzing failed and successful logon events to determine whether the activity was benign or suspicious.

Enterprise-grade Windows digital forensics & incident response suite. Features binary $I/$R Recycle Bin recovery, multi-profile browser history extraction, event log analysis, timeline correlation, SHA-256 evidence chain of custody, and court-ready HTML/CSV reporting with a high-performance PyQt5 Light Theme GUI.

Process mining over 66,061 recorded games of a trading-card-game AI competition. Comparing yourself to a stronger cohort generated seven levers; three point the wrong way. A frozen-agent arena shows why.

Process mining dashboard for CDA bus route analysis with AI-powered trip planning using Python and Streamlit.

Detection and investigation of potential Windows brute-force activity using Splunk and Windows Event ID 4625.