Three ML detectors watch the same network traffic and disagree. Measuring recall, latency, and data leakage across Random Forest, Isolation Forest, and an Autoencoder on CICIDS2017.

Automated Tier-1 SOC alert triage using Wazuh, n8n, MCP, and Gemini. Features a cost-saving cascade filter, threat intel enrichment (VirusTotal, AbuseIPDB), and reasoned Slack escalation

🏆 Best CS341 Project @ EPFL: Real-time ocean sim with god-rays, fish boids and MORE !