Sentinel: Intelligent Network Defense & Threat Deception System

Sentinel is an automated, proactive cybersecurity defense solution designed to secure enterprise network infrastructures by shifting from passive waiting to active threat deception. Built natively on MikroTik RouterOS, the system acts as an intelligent "decoy" (honeypot) to intercept, log, and neutralize unauthorized network reconnaissance attempts in real time.

Key Features & Architecture:

Proactive Threat Deception (Honeypot): Reconfigures router parameters to lure attackers away from core assets, serving as a secure trap for malicious probes.

Automated Scanning Detection: Instantly identifies malicious network scanning activities (such as reconnaissance probes via Nmap).

Automated Incident Response: Instantly captures malicious IP addresses, isolates threats, and populates firewall dynamic address lists without manual intervention.

Real-Time Mobile Alerting: Integrates the Telegram Bot API with custom RouterOS scripting to push instant security notifications and event details directly to administrators in under 10 seconds.

Technologies & Tools Used:

MikroTik RouterOS & Firewall Scripting

Telegram Bot API

Network Reconnaissance Detection (Nmap)

Network Security & Incident Response Automation