PROJECTS
AWS SOAR Engine
AWS tutorials only alert via email on incidents; email gets ignored. Wanted the fastest way to notify a human the moment an attack happens.
FLAGSHIPAWSLambdaWAFTwilioSOAR
Multi-Node Threat Intelligence Pipeline (Honeypot)
Wanted one project touching everything learned: cloud, automation, DevOps, AI integration, data, visualization, security. Not another off-the-shelf Cowrie/T-Pot deployment.
DigitalOceanSupabaseGitHub ActionsGeminiOpen DatasetNginx
AWS & Splunk SOC Lab
AWS has built-in SIEM tooling, but many companies already run Splunk and may lack budget for a fully separate native stack. Wanted to prove the two could be bridged.
AWSSplunkDockerSIEM