A Real-time Event Correlation platform
-
Updated
Jan 30, 2017 - Java
A Real-time Event Correlation platform
A method for event correlation detection based on Spatial-Temporal-Textual point process
Red team log aggregation and correlation tool with MITRE ATT&CK mapping and SEC integration
A Java concurrent API to asynchronously execute related tasks sequentially, and unrelated tasks concurrently.
Splunk lab detecting SSH brute-force attacks using failed login events, alerts, and dashboards.
TraceWeaver: nền tảng mã nguồn mở tái dựng hành trình yêu cầu từ log đa nguồn, điều tra sự cố và kiểm chứng khắc phục bằng bằng chứng. Dự thi OLP Phần mềm nguồn mở 2026.
Hands-on Active Directory authentication detection lab simulating SOC Tier-1 triage, correlation, and escalation workflows.
He desarrollado un proyecto de Splunk SIEM para Oryzon, una empresa científica ficticia que me contrata para supervisar y monitorizar su entorno tecnológico. Integro agentes Windows, analisis de eventos, MITRE ATT&CK, correlacion de eventos, alertas por correo, automatización con Python y manejo de falsos positivos. Valido y documento cada fase.
Real-integration SOAR pipeline: correlates JumpServer, PacketFence, and Active Directory events into cross-system incidents, then executes gated, human-approved response actions.
Cyber-Physical Event Bridge Prototype
Python-based infrastructure security analytics pipeline for AWS CloudTrail, Linux authentication, and Cisco IOS logs, with detection, correlation, risk scoring, reporting, and OpenSearch indexing.
Information Security Analyst
Access Log Correlator - Python based access log correlation tool for detecting failed login bursts with schema validation and JSON output.
Cross-domain event correlation via Prometheus Splunk PagerDuty OTel
VIGIL — Cloud-connected system monitoring & security dashboard for real-time performance and security events, with intelligent alerts, event correlation, encryption, and Supabase cloud synchronization.
Software CLI de análisis de eventos de seguridad en C que procesa telemetría JSONL/CSV con estructuras probabilísticas, correlación proceso-archivo-red, puntajes de riesgo, timelines y reportes JSON/HTML/CSV.
A hands-on Splunk Enterprise investigation of a simulated Windows brute-force incident, using authentication event correlation to distinguish expected service activity from a likely account compromise and develop a tuned detection rule.
Simulates a monitoring alert storm and an AIOps pipeline: dedup, flap suppression, time + topology correlation, priority scoring and root-cause candidates. Reports noise reduction, RCA accuracy and simulated MTTR (synthetic data only).
Governed AgenticOps proof of concept for IT Operations, combining event correlation, risk assessment, policy-controlled AI recommendations, human approval, simulated remediation, and auditability.
Cyber SentinelX – Adaptive Threat Monitoring Platform integrating authentication, SOC detection, and real-time threat visualization.
To associate your repository with the event-correlation topic, visit your repo's landing page and select "manage topics."