Replaying 2.7 Million Honeypot Attacks: From GitHub Gist to Interactive Map
May 06, 2026I had 800 historical snapshots of my Azure honeypot's blocklist sitting in a public GitHub gist — 527 unique attacker...
I'm Kyle Stanley, a Security Operations Analyst with hands-on experience in Microsoft Sentinel, threat hunting, and incident response. Currently protecting enterprise environments through proactive security monitoring, custom KQL detection engineering, and Azure security assessments. Built an advanced home lab featuring 15+ integrated security tools including Wazuh SIEM, Suricata IDS, and automated SOAR workflows. Architected a hybrid Azure honeypot that collects real-world threat intelligence and publishes community IOC feeds. Holds CompTIA Security+, Azure Administrator (AZ-104), and CompTIA A+ certifications—actively pursuing Microsoft SC-200. Passionate about turning security theory into production-ready detections, documented playbooks, and measurable risk reduction.
Currently Working On
Active projects and initiatives
Unauthorized Software Detection & Remediation
In ProgressBuilding KQL detection rules and automated PowerShell remediation scripts for rogue RMM tools and PUA browsers in Microsoft Defender
Azure Identity Security Lab
In ProgressEntra ID identity attack detection lab — building 15+ KQL detection rules in Microsoft Sentinel for password spray, MFA fatigue, and privilege escalation, with automated response via Microsoft Graph API and n8n SOAR workflows
Purple Team IR Campaign
In ProgressFull IR lifecycle purple team campaign across 5 attack scenarios using MITRE Caldera, with detections across Wazuh, Suricata, and Sysmon and case management in TheHive
Malware Analysis Pipeline
ActiveAutomated malware analysis using CAPEv2, Proxmox, and n8n workflows with detection engineering insights from 25+ samples
SOC Lab Environment
ActiveUnified SOC lab with OPNsense segmentation, SIEM integration, and Caldera adversary emulation
Certifications
Professional credentials and achievements
CompTIA A+
Foundational IT certification covering hardware, networking, mobile devices, and troubleshooting
CompTIA Security+
Industry-standard security certification covering network security, compliance, threats, and cryptography
Azure Administrator Associate
Microsoft Azure cloud administration certification covering identity, governance, storage, and compute resources
