Case studies

Project write-ups: the problem, my role, how it went, key decisions, the outcome and the limitations. Synthetic data is marked in the text.

1. Project 01Mini-SOAR: alert enrichment and threat hunting for a SOCMy own Python engine that queries the SIEM and makes alert analysis easier by adding extra context, and more.PythonOpenSearchSigma (pySigma)MITRE ATT&CKActive DirectoryPowerShellsystemdSQLiteRead the case study
2. Project 02User account analyzer: an account activity reportAn interactive HTML report on account activity - part of Mini-SOAR, with a demo report on synthetic data.PythonActive DirectoryMITRE ATT&CKHTMLPowerShellRead the case study
3. Project 03VirusTotal enrichment for Cloudflare alertsA Python script that adds extra information about the IP address from VirusTotal to Cloudflare alerts.PythonrequestsVirusTotal API v3CloudflareQuery DSLcronRead the case study
4. Project 04Automated shift reportA Python script that collects data from the SIEM for a given shift and builds a Word report from it using a template.Pythonpython-docxQuery DSLWord (DOCX)Read the case study