Kali · CLI · strace · syscalls · NDR · DFIR · ML-ready
A stateful, kernel-truth-driven security intelligence platform built on Kali Linux that
wraps command execution safely, captures system calls using strace, reconstructs per-PID forensic timelines,
validates personal behavior baselines (CBSV), correlates privilege abuse with network follow-ups (ANADR),
and emits explainable, ML-ready suspicion scoring with soft response recommendations.
EDR + NDR fusion
kernel truth
process causality
stealth-aware
forensics replay
python · sockets · logging
Mission: observe attacker behavior in a controlled environment. Python socket-based honeypot that listens
for incoming connections, simulates a weak target and logs interaction attempts for analysis.
deception
logging
python · rules engine
Mission: understand packet filtering and rule evaluation. A simulated firewall that applies allow/deny
rules to packets based on ports, protocols and addresses, with logging for each decision.
defense
traffic filtering
python · http · recon
Mission: automate recon and surface web weaknesses. A Python-based scanner that sends crafted requests and
checks for common issues like SQLi, XSS and insecure headers based on response patterns.
web security
automation