A Real-time Event Correlation platform
-
Updated
Jan 30, 2017 - Java
A Real-time Event Correlation platform
A method for event correlation detection based on Spatial-Temporal-Textual point process
Red team log aggregation and correlation tool with MITRE ATT&CK mapping and SEC integration
A Java concurrent API to asynchronously execute related tasks sequentially, and unrelated tasks concurrently.
Splunk lab detecting SSH brute-force attacks using failed login events, alerts, and dashboards.
Hands-on Active Directory authentication detection lab simulating SOC Tier-1 triage, correlation, and escalation workflows.
Cyber-Physical Event Bridge Prototype
Real-integration SOAR pipeline: correlates JumpServer, PacketFence, and Active Directory events into cross-system incidents, then executes gated, human-approved response actions.
Python-based infrastructure security analytics pipeline for AWS CloudTrail, Linux authentication, and Cisco IOS logs, with detection, correlation, risk scoring, reporting, and OpenSearch indexing.
Information Security Analyst
Simulates a monitoring alert storm and an AIOps pipeline: dedup, flap suppression, time + topology correlation, priority scoring and root-cause candidates. Reports noise reduction, RCA accuracy and simulated MTTR (synthetic data only).
SIEM lab simulating centralized log monitoring, event correlation and alert generation using authentication and system logs with detection rules based on real-world security scenarios.
Access Log Correlator - Python based access log correlation tool for detecting failed login bursts with schema validation and JSON output.
Cyber SentinelX – Adaptive Threat Monitoring Platform integrating authentication, SOC detection, and real-time threat visualization.
Windows SOC monitoring lab demonstrating security auditing, Sysmon telemetry, authentication analysis, process monitoring, DNS analysis, and event correlation.
Collapses a high-volume event stream into a short list of actionable cases — runtime-configurable detectors and expression-driven correlation. Java 17 · Spring Boot
Local SOC-style correlation engine for recorded authentication and MFA events. Groups events across configurable time windows to surface failure bursts, success-after-burst patterns and repeated MFA denials with pseudonymized actor IDs.
Threat intelligence integration and event correlation platform
Cross-domain event correlation via Prometheus Splunk PagerDuty OTel
ThreatWeave - Real-time Threat Detection & SIEM Correlation Engine. Correlate security events from AWS CloudTrail, Office 365, Salesforce, Okta & more to detect sophisticated threats & attack patterns. Open-source, production-ready, MIT licensed. 🔐
To associate your repository with the event-correlation topic, visit your repo's landing page and select "manage topics."