9 MITRE ATT&CK-mapped KQL detections on a live Microsoft Sentinel + Defender XDR environment (control-plane, endpoint, identity), with a PR-gated Detection-as-Code pipeline (GitHub Actions, OIDC), SOAR playbooks, and a SOC 2 control mapping.

IAM Authentication Audit Tracker is a Terraform-based AWS security lab that detects IAM login anomalies using CloudTrail, CloudWatch, SNS, and Athena. It integrates tfsec scans through GitHub Actions and demonstrates alerting, audit log analysis, and compliance mapping to NIST 800-53 (AU-6, AC-7) and ISO 27001 A.12.4 using secure IaC

IAM Authentication Audit Tracker is a Terraform-based AWS security lab that detects IAM login anomalies using CloudTrail, CloudWatch, SNS, and Athena. It integrates tfsec scans through GitHub Actions and demonstrates alerting, audit log analysis, and compliance mapping to NIST 800-53 (AU-6, AC-7) and ISO 27001 A.12.4 using secure IaC

The MITRE ATT&CK Alerts For log point

A Model Context Protocol (MCP) server for automated security scanning and live validation of LLM API keys and cloud endpoints

Modular Linux attack timeline detection engine with MITRE ATT&CK mapping and CI-backed test suite.

Machine learning–based malware detection system with full-stack implementation.

Bash script to test if a web app is vulnerable to CVE-2025-29927

🔗 Simulate identity federation and access governance with Keycloak and SailPoint IIQ for streamlined security and management.