ids-ips

A web-managed open source firewall, rebuilt on Debian 13. A fork of OPNsense re-engineered to run natively on Linux: nftables, systemd, iproute2 and apt.

SentinAI: A localized SOC toolkit and Hybrid IDS/IPS utilizing a dual-engine architecture (Heuristics + ML/IsolationForest) for real-time network threat detection.

A SOC lab platform integrating IPS/IDS/WAF using pfSense, WAF, web/database servers, IDS, and ELK, including network topology diagrams, VMware VMnet setup, and IP/subnet design.

Projet de fin de formation: infrastructure reseau securisee avec pfSense, PKI, OpenVPN, pfBlockerNG et Snort IDS/IPS.

A compact, self-contained lab that demonstrates real-time intrusion detection and automated response using an IDS script (Scapy), Cisco router ACLs (Netmiko), and victim host hardening (Paramiko + iptables).

Security-focused distributed NAS platform built using Nextcloud, Docker, Grafana, Prometheus, and fail2ban with real-time monitoring, security event logging, brute-force detection, infrastructure observability, and centralized dashboard monitoring.

Segmented enterprise network lab with pfSense, Suricata IDS/IPS, and attack simulation

A modular Python-based SIEM/IPS that monitors system logs in real-time (Sentinel) and automates threat response (SOAR). It features Regex-based log normalization, hybrid event correlation (SSH/Web), and automated firewall blocking integrated with AbuseIPDB and Discord alerts.

Ciclo completo de auditoría, detección y remediación con Wazuh (SIEM), Suricata (IDS), Nmap, Hydra y Metasploit. Mapeo a ISO 27001/27005 y NIST 800-53.

NT405 - Cyber Security

A cloud-native security lab on AWS that automates threat detection and compliance enforcement. Deploys a 3-tier VPC with Suricata IDS/IPS, ModSecurity WAF, Duo MFA, WireGuard VPN, and ELK Stack — all provisioned via Terraform, configured with Ansible, and continuously validated with InSpec compliance-as-code checks.

PiNetCore - Production-ready Raspberry Pi 5 network appliance. Rust-based packet capture engine with modular plugin architecture, nftables firewall, and TypeScript/React dashboard. Features inline bridge mode, VPN integration (WireGuard/OpenVPN), IDS/IPS support, and centralized logging. Built for home labs and advanced network control.

Autonomous IDS/IPS with ensemble ML voting, post-quantum cryptography, Kubernetes Zero Trust, self-healing watchdog, and live SOC dashboard

Fully segmented home network with OPNsense, Suricata IDS/IPS, VLAN isolation, WireGuard VPN and TIG monitoring stack. Defense-in-depth architecture with 7 isolated zones.

Hands-on Suricata IDS lab demonstrating real-time threat detection with custom detection rules

piggy that sniff terror in the net :`0

Free, interactive course on firewalls & network security, built around OPNsense — 5 modules, 13 lessons, 51 quizzes. Runs entirely in your browser.

Documentation of a ransomware security incident at a healthcare clinic using the 5 W's framework for incident handling and reporting.

Network Security Advanced course notes - CET2883C Santa Fe College

A modular, plug-and-play Intrusion Detection & Prevention platform where AI models and blockchain ledgers hot-swap into a decoupled core engine — real-time monitoring, automated prevention, and tamper-evident logging by design.