Leonardo Barros

bluephoenix-detection-lab

A GitHub-first detection engineering lab focused on MITRE ATT&CK–aligned detections, real endpoint telemetry, and security automation design.

1 star

DefenderHunt

Modular threat hunting and incident response toolkit using Microsoft Defender, KQL, and MITRE ATT&CK. Built for SOC analysts and cloud security engineers.

Python • 1 star

azure-identity-automation-lab

Automating Azure Entra ID identity operations using Python and Microsoft Graph. Covers user creation, group management, membership assignment, and identity auditing.

Python • 1 star