


Detects LLM context-leakage attacks by training lightweight behavior probes on log-probabilities, with vLLM offline/server detection pipelines.

Basic log analysis tool to detect impossible travel via IP address geographic information

Web-based Traffic and Cybersecurity Network Traffic Monitoring

A modular, skill-based autonomous Security Operations Center (SOC) agent that monitors OpenSearch/Elasticsearch data, builds RAG-based behavioral…

Advanced detection of port scanning, DoS and malware attacks using Machine Learning techniques

Browser privacy-leak detector — eight detection modules, risk scoring, and per-account history, all in your browser.

Detects phi-structured C2 beacons that evade RITA and standard regularity-based detectors

Streamlit-based insider threat detection prototype using XGBoost and Isolation Forest to analyze employee activity data, generate risk summaries, and…

This repository includes the source code used in the "Characterization and Detection of Cross-Router Covert Channels" paper.

This repository provides an in-depth analysis of the Log4Shell vulnerability (CVE-2021-44228) and implements a machine learning-based approach to…

A curated portfolio showcasing my SOC investigations, threat hunting projects, DFIR labs, detection engineering, technical blogs, and cybersecurity…

HASSH is a network fingerprinting standard which can be used to identify specific Client and Server SSH implementations. The fingerprints can be…

NFStream: a Flexible Network Data Analysis Framework.

Flows-first PCAP TUI (case files, gorgeous UX). Do do do do.
