I’m Adam Ghanem, a DUT cybersecurity and networking student building practical tools for SOC work, detection engineering, pentest-adjacent defensive analysis, and network defense. I learn by turning security workflows into small, explainable, and safe-to-run projects.
| Project | What it demonstrates | Explore |
|---|---|---|
| NetWatch | Local-first network visibility for authorized teams: asset discovery, change review, bounded service review, and payload-free traffic metadata. | Repository |
| AI-SIEM | A defensive SOC engineering lab for local log ingestion, event normalization, detections, alert correlation, and analyst workflows. | Repository |
| RedPath | A synthetic, safe-to-explore attack-path and detection-coverage console that connects evidence, gaps, and remediation. | Repository · Live demo |
NetWatch was selected for the XERJ Corpus Hub contributor programme on 10 October 2026, recognizing network-security/PCAP evidence work in Adam-Ghanem/NetWatch. Status: selected, licence review pending; the corpus is not yet live or installable. This is project recognition, not a certification or independent security audit.
Security labs, detection logic, network visibility, and defensive engineering.
Building practical security work, one useful project at a time.



