Offline-first, budget-aware log+CTI pipeline with optional LLM enrichment; grouping/sampling gates, strong CTI cache, reproducible reports, Streamlit UI.

Academic assignment on Cyber Threat Intelligence — covering Kill Chain, Diamond Model, ATT&CK framework, threat hunting, and intelligence lifecycle analysis.

Certified Threat Intelligence & Governance Analyst (CTIGA) — Red Team Leaders. Issued May 11, 2026.

Sysmon-based detection of NMAP, Brute Force & Akira Ransomware