● OPEN-SOURCE REPOSITORIES & LABS

AI Security, SOC &
Cloud Projects

Open-source security engineering labs, detection tools, eBPF runtime engines, and AI-powered SOC triage systems built by Israel David.

60+ GitHub Repositories

85% MITRE ATT&CK Coverage

4 Core Security Domains

eBPF Kernel Telemetry

Featured Open Source Repositories

Click cards to visit GitHub repositories

Asynchronous Python & PostgreSQL REST API architecture supporting AI task queues, state management, and high-throughput backend data pipelines.

Real-time threat detection engine designed to analyze high-velocity brute-force authentication attempts and anomalous login behavior.

Deep eBPF kernel-level runtime telemetry and rule engineering for Kubernetes container environments to detect malicious system calls.

Hands-on security engineering lab deploying Wazuh SIEM, advanced Sysmon endpoint telemetry, and attack rule validation using Atomic Red Team.

LLM-powered security assistant that automatically parses, enriches, and prioritizes high-volume SIEM alerts for SOC analyst teams.

Threat hunting case study investigating advanced adversary playbooks inside Splunk using the Boss of the SOC (BOTS) dataset.

● SECURITY PHILOSOPHY

🛡️

"A SOC that thinks before an analyst has to — automating high-volume SIEM alert triage with LLM agents so human responders focus on true threats."

LLM Triage & Enrichment

⚡

"Kernel-level visibility with eBPF and Falco to detect zero-day container escapes and anomalous runtime behavior inside Kubernetes clusters."

Falco & eBPF Telemetry

🔐

"Proactive Threat Detection and Detection-as-Code CI/CD pipelines validating custom Sigma rules against attack simulations before deployment."

Sysmon & Atomic Red Team