Intrusion Detection System with ELK & Suricata
Built a lab-based IDS on CentOS with Suricata and ELK Stack to monitor traffic, automate log analysis, and demonstrate faster detection of network threats.
•
1 min read
Built a lab-based IDS on CentOS with Suricata and ELK Stack to monitor traffic, automate log analysis, and demonstrate faster detection of network threats.
Developed a proof-of-concept keylogger in a controlled lab with pynput and smtplib, highlighting exfiltration risks and strengthening understanding of attacker techniques.
Recovered deleted files and artifacts from a compromised VM using Autopsy and SIFT Workstation, reinforcing skills in digital forensics and incident response.