A regex-based brute-force detection engine that parses auth logs and fires threshold alerts — the same logic a SIEM uses, built from scratch.
Source repository
Back to the portfolio