Cloud Analytics helps defenders detect attacks to their cloud infrastructure by developing behavioral analytics for cloud platforms as well as a blueprint for how others can create and use cloud analytics effectively.

Run detections and view dashboards for your AWS CloudTrail logs to monitor and analyze activity across your AWS accounts using Powerpipe and Tailpipe.

Run detections and view dashboards for your GCP audit logs to monitor and analyze activity across your GCP projects using Powerpipe and Tailpipe.

A purple team oriented cyber range deployed in AWS with Terraform

Run detections and view dashboards for your Azure activity logs to monitor and analyze activity across your Azure subscriptions using Powerpipe and Tailpipe.

Run detections and view dashboards for your Apache access logs to monitor and analyze activity across your web servers using Powerpipe and Tailpipe.

Run detections and view dashboards for your GitHub audit logs to monitor and analyze activity across your GitHub organizations and repositories using Powerpipe and Tailpipe.

Run detections and view dashboards for your Nginx access logs to monitor and analyze activity across your web servers using Powerpipe and Tailpipe.

Run detections and view dashboards for your GitHub security logs to monitor and analyze activity across your GitHub accounts using Powerpipe and Tailpipe.

Production-ready SOC implementation with Splunk, SOAR automation, and MITRE ATT&CK detection rules splunk, phantom, zeek, incident-response, threat-hunting, detection-rules, blue-team, security-orchestration, aws, cloud-security, devops, infrastructure-as-code

🔍 Build a robust Security Operations Center (SOC) with this comprehensive blueprint, featuring Splunk SIEM, automation, and enterprise-level security monitoring.

MSc Cybersecurity research evaluating Azure micro-segmentation effectiveness against lateral movement attacks. Compares NSG, ASG, and Azure Firewall strategies using infrastructure-as-code and simulated attack scenarios.