A collection of my Digital Forensics and Incident Response (DFIR) case investigations, including TryHackMe and real-world styled incident analysis. Each case includes methodology, findings, timelin…

InjecDetect: An ML-Based Prompt Injection Detection System

A forensic tool that analyses QUIC Initial packets from PCAP files to extract connection-level behavioural fingerprints and apply deterministic logic rules and YARA-style signatures

RDPTimeline is a DFIR tool that reconstructs RDP sessions from Windows Event Logs using timeline analysis, then correlates and flags suspicious activity occurring within and around those sessions u…

This is an applied security research tool that demonstrates structure based password entropy estimation inspired by Expectation Entropy, with attacker-centric interpretation.

IdleCrypt is a macOS-based security tool that automatically encrypts the contents of a sensitive folder when the system is left unattended for a specified period of time.