Mission Control for Your Operations
Practical DFIR and incident response playbooks covering phishing, malware, ransomware, insider threats, and cloud security incidents for SOC and IR teams.
Ask your logs what happened. Evidence-based incident explanations from logs: no dashboards, no chat, no hallucinations.
Open-source physical observability for robotics workcells: deterministic replay, verifiable incident evidence, and generated regression tests.
An agent driven incident investigation platform
Deterministic replay and distributed incident forensics for first-failure and blast-radius analysis.
Structured investigation method: 5 Ws + 5 Whys with Bayesian reasoning, causal DAG traversal, and formal proofs. For any domain — engineering incidents, business failures, medical diagnosis, personal decisions.
Evidence capsules for production incidents: preserve the cross-domain signals needed to investigate after logs, metrics, and traces expire.
AI incident analysis agent over logs and metrics with anomaly detection, correlation, root-cause analysis, and LLM-assisted reporting.
Audit and clean up Kilo cloud-session exports.
AI-powered incident analysis system using LLMs, FAISS vector search, and structured remediation planning
Claim-level evidence reconstruction of the 2026 OpenAI–Hugging Face incident with an interactive dashboard and defensive follow-up checks.
Python + Power BI project analyzing ServiceNow IT incident data. Identifies SLA breaches, delay patterns, and workload inefficiencies using statistical validation (Z-Test, ANOVA) and interactive KPI dashboards.
Post-hoc claim analysis for multi-party records: accuracy verdicts, distortion flags, and a triage-framework mapping of each participant's reasoning
Self-arguing multi-agent LLM system for cybersecurity incident analysis that treats disagreement and uncertainty as first-class outputs instead of forcing single verdicts.
From initial access to impact, this investigation report details my findings, methods, and lessons learned as a SOC Analyst during a mock incident-response investigation scoped for educational purposes based on the "Scanned Document 468" CTF by jirosgyros from https://github.com/jirosgyros/soc-ctf-scanned-document-468
Replayable agent trajectories reconstructed from the July 2026 frontier-lab evaluation-containment failures, plus benign controls for measuring false-positive cost.
🛡️ A comprehensive web application built with Next.js for conducting systematic risk evaluations and root cause analysis. Features multi-step forms for project data collection, potential hazard assessment, immediate and basic cause identification, and corrective action planning.
Root-cause analysis skill for Claude Code — the Toyota 5-Why method as an installable plugin. Turns recurring bugs, incidents and failures into root causes instead of symptom patches. Includes a what-for variant for goal development (OKRs).
To associate your repository with the incident-analysis topic, visit your repo's landing page and select "manage topics."