
ImpossibleTravelLogAnalysis
Basic log analysis tool to detect impossible travel via IP address geographic information

Basic log analysis tool to detect impossible travel via IP address geographic information

Burp plugin that clusters responses to show an overview of received responses

Autonomous Rust endpoint security agent combining Ring-0 Windows driver and Linux eBPF pre-execution blocking, YARA detection, MITRE ATT&CK mapping,…

A Bro package to identify connections that are bursting (lots of data and transferring quickly).

Reverse Shell Detection with Machine Learning

Fingerprint SSH clients and servers.

Zeek plugin to detect and decrypt XOR-encrypted EXEs

Analyzes LLM internal states and 100+ attention/probability features to train classifiers that detect document poisoning attacks in RAG systems.

Adaptive two-stage Layer 4 DDoS mitigation gateway using behavioral traffic analysis, Random Forest classification, and kernel-level ipset/iptables…

Runs custom filters on Elasticsearch and alerts on matches

Daemon to randomize tcp_challenge_ack_limit to prevent side channel attacks CVE-2016-5696

Linux kernel module using Kprobes to detect and neutralize CVE-2024-1086 heap double-free exploits via temporal gap tracking and active register…

Client-side bot detection library with 28 weighted modules, behavioral analysis, browser fingerprinting, honeypots, and server-side verification.…

A Red Team vs. Blue Team Adversarial AI Simulation.

A Zeek based AsyncRAT malware detector.

A real-time traffic monitoring tool that detects and displays network traffic volume per IP address to identify potential DDoS attacks.

Autonomous AI-powered cyber defense system using MCP, Gemini 2.0 Flash, Dynatrace observability and MongoDB. Google Cloud Hackathon submission.

A personal Windows SOC suite built in PowerShell — monitors network connections, resource usage, scheduled tasks and power events with severity…