attack-analysis

Syracuse University, Masters of Applied Data Science - IST 623 Introduction to Information Security

ATT&CK-annotated shell-honeypot attack dataset (Cowrie, 2021-2022 vs 2024) with real command->response pairs, Vi severity labels, and a reproducible analysis pipeline. IEEE SRDS 2025.

Khalil, R. and Dulay, N. 2022. 37th ACM/SIGAPP Symposium on Applied Computing. RANC: Reward-All Nakamoto Consensus.

Splunk BOTS investigation of a 2018 North Korean attack on Frothly beer company. Traced complete attack chain from reconnaissance to 31.6 MB data exfiltration in 90 seconds using 9 Splunk queries. Incident response portfolio with methodology, queries, timeline, and findings.

Interactive Dashboard for Global Terrorism Analysis

Modern bilingual IT/EN honeypot and SOC analysis platform for attack monitoring, session correlation, threat intelligence, Suricata, MITRE ATT&CK, reporting and cybersecurity learning.

CyberShield — World's first labeled dataset of psychological cyber attacks. Built from 5 years of direct personal experience.

Analysis scripts for Cowrie, OpenCanary, Dionaea, Telnethoney honeypots — SSHLab Security Research Series

ZentLoop is a Docker-first deception and honeypot platform for observing hostile HTTP and SSH activity without giving visitors a real shell, real filesystem access or attacker-directed outbound network access.

Medium-interaction SSH honeypot for attack analysis, command logging, GeoIP tracking, and web-based visualization dashboard.