Pinned Loading

1. splunk-threat-detection-lab splunk-threat-detection-lab Public

   Splunk SIEM detection lab: phishing disruption (SPF/DKIM/DMARC, lookalike domains, campaign fan-out, risk scoring) plus brute-force, privilege-escalation, and lateral-movement SPL rules, incident r…

2. Terraform-Azure-3-Tier-VNet-LB-VMs-MySQL-FlexibleServer Terraform-Azure-3-Tier-VNet-LB-VMs-MySQL-FlexibleServer Public

   Single-cloud Azure deep dive: production 3-tier infrastructure built with modular Terraform — VNet, public/private subnets with delegation, NSG chaining, Standard Load Balancer, Linux VM Scale Set,…

   HCL

3. Zero-trust-iam-lab Zero-trust-iam-lab Public

   Zero Trust IAM on AWS: least-privilege policies, permission boundaries, SCPs, ABAC, and a Python (boto3) IAM auditor that scans an account against the CIS Benchmark and reports findings.

   Python

4. WAF_Application_Security_Lab WAF_Application_Security_Lab Public

   Nginx Web Application Firewall detecting OWASP Top 10 (SQLi, XSS, SSRF, path traversal) with regex signatures, security headers, rate limiting, and a Python attack simulator.

   Python

5. Ansible-Configuration-Management-Nginx-NodeJS-Systemd Ansible-Configuration-Management-Nginx-NodeJS-Systemd Public

   Idempotent server configuration with Ansible role-based architecture (common, nginx, epicbook) — UFW hardening, Jinja2-templated Nginx configs, Node.js app deployment via systemd, dev/prod inventor…

   HCL

6. Kubernetes-EKS-Microservices-Deployment-Docker-RDS Kubernetes-EKS-Microservices-Deployment-Docker-RDS Public

   Containerized 3-tier deployment on AWS EKS: Dockerized Next.js frontend and Node.js/Express backend orchestrated on Kubernetes with multi-stage linux/amd64 builds, ConfigMaps/Secrets, LoadBalancer …

   Dockerfile