Operation Sentinel update — now parsing external identity surfaces hunter.py: off-hours admin detection if…
Melissa W. — Detection Engineer | IAM & ITDR Analyst | SOC & GRC Specialist | Python SIEM Automation (120m→30m) | DORA & NIS2 Compliance | Triple MSc CS/DS/AI | W-8BEN Approved Contractor (Remote CET/EST)
Operation Sentinel update — now parsing external identity surfaces
hunter.py: off-hours admin detection
if e.role == 'admin' and e.hour not in range(9,17): flag(e) — 120m → 30m
NEW: linkedin_hunter.py parses LinkedIn Logins.csv (Login.csv export) for impossible travel / off-hours / untrusted city flags. Same scout logic.
Mapped to DORA Art 10 + NIS2 Art 21. Proof-first, 1-page evidence map.
Repo: github.com/ssambra/operation-sentinel
Open to peer review — built in Kitimat kitchen lab.
DM ANT for lab / CHECK for gap assessment.
4 reactions · 0 comments