event-log-analysis

A modern Flet-based UI for PM4PY that enables process mining, discovery, conformance checking, filtering, and analysis of event logs without writing code.

Advanced Windows Event Log threat hunter in pure PowerShell — Sigma-subset detection, correlation engine, per-entity risk scoring, self-contained HTML reports. Zero dependencies, air-gap ready.

Process Mining analysis using Disco - Discovery, Conformance Checking & Enhancement

BeCode AD lab on Azure : build, harden, detect. 11 MITRE techniques, 11/11 detection rate. External credential-stuffing capture as real-world validation.

Process mining over 66,061 recorded games of a trading-card-game AI competition. Comparing yourself to a stronger cohort generated seven levers; three point the wrong way. A frozen-agent arena shows why.

A Windows Event Viewer investigation analyzing failed and successful logon events to determine whether the activity was benign or suspicious.

This project aims to redesign Windows audit policy configurations to reduce log noise and enhance detection clarity within Splunk. The objective is to produce a streamlined, purposeful audit policy that supports effective threat detection, baselining, and investigative workflows in a lab or SOC simulation environment.

Detection and investigation of potential Windows brute-force activity using Splunk and Windows Event ID 4625.

Process mining dashboard for CDA bus route analysis with AI-powered trip planning using Python and Streamlit.

Detection and investigation of potential Windows brute-force activity using Splunk and Windows Event ID 4625.