
aegis
Kernel-mode process protection driver with user GUI

Kernel-mode process protection driver with user GUI

Converts Sigma detection rules into OpenSearch Lucene and PPL queries, including alerting Monitor Rules and correlation support for SIEM detection…


Blue-team SIEM lab: Wazuh 4.7.5 detecting 7 simulated attacks (SSH brute force, Slowloris DoS / CVE-2007-6750, web attacks) with real-time MITRE…

BitLocker TPM+PIN Hardening Against CVE-2026-45585 (YellowKey)

Customer Assurance Operating System. Answer the security questionnaires your customers send you, once.


HTTP/2 attack simulation & defense lab - Slowloris, Rapid Reset (CVE-2023-44487), HPACK Bomb attacks with 5 layered defenses. Built in pure Python…


A personal Windows SOC suite built in PowerShell — monitors network connections, resource usage, scheduled tasks and power events with severity…



Official IP ranges for AI bot crawlers (OpenAI, Anthropic, Google, Microsoft, Perplexity). Weekly auto-updates.

Lightweight scriptable honeypot runner

My manifesto, and stories, images, and phun stuff


Citrix ADC (NetScaler) Honeypot. Supports detection for CVE-2019-19781 and login attempts