Projects
Security projects, and works I've built.
Nutanix Log Integrations with Graylog and Grafana
Forwarding Nutanix cluster logs into Graylog, parsing them into normalized fields, and visualizing access activity in Grafana across a four CVM production cluster.
Nutanix
SOC Fortress
Graylog
OpenSearch
Grafana
Syslog
Grok
Featured
Production Wazuh SIEM Deployment
A distributed Wazuh 4.14.5 SIEM deployment across 13 VMs: a 3 node indexer cluster, server cluster with HAProxy load balancing, and mass agent deployment via Active Directory GPO and Ansible.
Wazuh
OpenSearch
HAProxy
Active Directory
Ansible
Ubuntu 22.04
Windows Server 2022
Featured
Wazuh NetFlow Monitoring Pipeline
Network flow visibility integrated into Wazuh SIEM using pmacctd, Python normalization, and 24 custom detection rules, validated against real internet traffic.
Wazuh
pmacctd
Python
OpenSearch
Ubuntu 22.04
Featured
Endpoint Detection with Falco, Auditd, and Sysmon
Endpoint security monitoring for Linux and Windows servers using Wazuh, Falco, auditd, and Sysmon, including custom detection development, validation, and production handover.
Wazuh
Falco
auditd
Sysmon
Ubuntu 22.04
Windows Server 2019
Linux eBPF
MITRE ATT&CK
Showing 1-4 of 4