Pinned Loading

1. cysa-linux-attack-chain-splunk cysa-linux-attack-chain-splunk Public

   Simulated Linux attack chain with Splunk detections, ATT&CK mapping, and SOC-style analysis across multiple attacker behaviors.

2. ot-ics-modbus-rtu-write-detection-lab ot-ics-modbus-rtu-write-detection-lab Public

   Detects unauthorized Modbus RTU write activity using Python telemetry and Splunk correlation mapped to MITRE ATT&CK for ICS.

3. ot-ics-soc-detection-lab ot-ics-soc-detection-lab Public

   OT/ICS-focused SOC lab demonstrating Splunk-based detection logic, monitoring workflows, and industrial threat visibility.

4. raspberry-pi-vuln-lab raspberry-pi-vuln-lab Public

   Hands-on Raspberry Pi security lab covering vulnerability assessment, hardening, CVE review, and reporting workflows.

5. siem-nmap-lab siem-nmap-lab Public

   Mini SOC lab using Nmap-generated activity, log ingestion, Splunk analysis, and alert-driven investigation workflows.

6. titan-ot-llm-log-analyzer titan-ot-llm-log-analyzer Public

   Local OT/ICS log analysis pipeline using Python and local LLMs to support detection engineering and ATT&CK-aligned triage.

   Python