nilesh

GitHub 3 repos 4 followers

Explained projects

Wazuh-SIEM-Lab: The Repo That Turns a SIEM Into a Detection Engine
Wazuh-SIEM-Lab: The Repo That Turns a SIEM Into a Detection Engine
A two-node lab that starts with default alerts and ends with tuned rules, real-time file integrity monitoring, and the log-forensics mistakes every security engineer eventually has to make.
8 min read · Jun 30, 2026

Yet to be explained

Endpoint-Trojan-Malware-Detection-and-Incident-Response
This repository documents a real-world endpoint security incident involving a Trojan infection detected by Windows Security.
1 stars
Explain
SIEM-Threat-Detection-Log-Correlation-Splunk
SOC-style SIEM project using Splunk SPL to detect and correlate DNS threats (DGA/beaconing) and HTTP web attacks (SQLi, XSS, exfiltration) across log sources.
0 stars
Explain