loganalysis

Webhawk/Catch helps automatically finding web attack traces in logs

Django middleware and signals for handling security events

[ESEC/FSE'23] Hue: A User-Adaptive Parser for Hybrid Logs

"GuardianEye 🌐🔒: Empowering Cybersecurity with Advanced Keylogger – A robust defense system providing comprehensive monitoring of employee activities, capturing keystrokes, screenshots, application logs, and system logs for proactive threat detection and enhanced security insights in modern business operations. 🛡️💻

This repository is not maintained. For the latest information, please refer to qsv-rs, which is a complete reimplementation in Rust.

30+ projects AWS SOC/SOAR Ecosystem portfolio with Wazuh, TheHive, Cortex, MISP, n8n, network security monitoring, Threat Detection & Hunting, Alert triage, Log Analysis, Detection engineering, Incident Response, dashboards, and AI security automation.

Basic Windows Sysmon log analysis for security monitoring and threat detection

A python script to search a file for the user input | Return the previous, current and next line of the searched input | Write the current line into a new file

Developed a log analysis system to detect security incidents, reconstruct attack timelines, and identify malicious activity using Linux and Windows logs, demonstrating blue-team threat detection and incident response skills.

SOC-STORM: Automated Multi-Stage Threat Correlation Engine. SOC-STORM is a lightweight Security Operations Center (SOC) dashboard and backend engine designed to aggregate fragmented security logs, correlate multi-stage attack patterns by target IP and user, and map them into a real-time chronological threat storyline.

Detecting Suspicious Brute Force Attack Logs.

This tool is designed to scan log files for various security events and present the findings in an easy-to-read table format directly in your terminal. It includes features for custom pattern detection and provides recommended remedies for detected issues.

Solución avanzada impulsada por IA para el análisis automatizado de registros de sistemas

A pure-Python log analyzer that parses system logs, detects patterns, and generates metrics and alerts based on logical rules.

LogGuardian is a Blue Team, log and config analyzer tool designed to help detect brute force attacks, misconfigurations, and other security events in real-time.

Python-based security log analyzer that detects failed login attempts, identifies suspicious activity, and generates a security report.

Log Analysis of Telnet session hijacking via MAC address spoofing using cowrie Honeypots

A tool to clip the Can Logs

A modular SIEM Log Analysis & Threat Detection Engine in Python. Parses Linux Auth, Web (Apache/Nginx), and Syslogs to detect brute-force attacks, SQLi/XSS web payloads, privilege escalations, and directory scanners in real-time or batch mode, exporting interactive HTML dashboard reports and JSON audits.

Synthetic Red Team Simulator Dashboard with AI