detection-engineerin

Laboratório de Detection Engineering com Wazuh e Sysmon para detecção de execução do PowerShell mapeada à técnica MITRE ATT&CK T1059.001. | | Detection Engineering lab with Wazuh and Sysmon for PowerShell detection mapped to MITRE ATT&CK T1059.001.

Endpoint detection pipeline using Sysmon, Splunk, and Atomic Red Team. Learning detection engineering hands-on.

SOC-style home lab: centralized Linux log monitoring with SSH brute-force detection and automated alerting.

AI-powered SIEM-lite web app that ingests security logs, detects attacks with Sigma rules and ML anomaly detection, and summarizes incidents with an LLM. Maps findings to MITRE ATT&CK. Built with Quarkus & React.