AI Security Projects

AI-Powered Deception & Threat Intelligence Platform for Local Honeypot Analysis.

A free, local AI-powered incident reporting platform that transforms raw SOC alerts and logs into structured, framework-aligned (NIST/MITRE) incident reports using Ollama.

Real-time AI ransomware detector utilizing Shannon entropy file telemetry, process I/O tracking, and Isolation Forest anomaly detection to isolate zero-day encryption bursts.

An AI-powered purple teaming assistant that generates lab attack simulations, defensive mitigations, and detection rules across Wazuh SIEM, Splunk SPL, Sentinel KQL, and Sigma.

Unsupervised Machine Learning Engine for User, Network, and Endpoint Behavior Analytics (UEBA)

A fully local AI cybersecurity assistant powered by RAG, Ollama, and ChromaDB to analyze MITRE ATT&CK, NIST frameworks, and incident reports offline.

An intelligent, version 1 Security Orchestration, Automation, and Response (SOAR) platform that automates alert ingestion, threat enrichment, AI-driven investigation, and incident reporting.

AI threat hunting assistant that converts hunting hypotheses into SIEM queries and searches security datasets for attacker behavior.

An AI-powered network monitoring tool that analyzes PCAP files to detect anomalies, suspicious communication, and potential cyber attacks using Machine Learning.

A machine learning malware classifier analyzing static PE features, signatures, and behavioral logs using Random Forest.

An AI-powered code review assistant that detects OWASP Top 10 vulnerabilities in Python, Java, and JavaScript applications, providing context-aware secure coding recommendations using Google Gemini 3.6-flash.

An AI-powered tool that analyzes security event logs and automatically maps them to MITRE ATT&CK techniques using NLP and confidence scoring.

A completely free, AI-powered Incident Response Assistant that utilizes the NIST IR Framework to guide security analysts through alert triaging, containment, eradication, and recovery using Google's Gemini AI.

An AI-powered dashboard builder that ingests security logs (CSV/JSON) and automatically generates interactive charts, KPIs, trends, and executive summaries.

A completely offline AI-based DNS Analyzer built in Python to detect DNS tunneling, DGA domains, and suspicious queries with automated threat explanations.

An intelligent File Integrity Monitoring (FIM) tool that detects abnormal file modifications using SHA-256 hashing and Scikit-Learn Isolation Forest anomaly detection.

An AI-powered malware sandbox report analyzer that extracts suspicious behaviors, persistence methods, and MITRE techniques using free LLMs.

An open-source, AI-powered Threat Intelligence tool that automatically investigates IPs, Domains, URLs, and Hashes using free OSINT APIs (VirusTotal, AlienVault OTX, AbuseIPDB) and generates comprehensive security analysis reports via Large Language Models.

A completely free, AI-powered assistant that translates natural language SOC analyst questions into precise Splunk SPL, Elastic KQL, Microsoft Sentinel KQL, and Wazuh SIEM queries. Built for threat hunters.

An AI-based authentication anomaly detector that utilizes Machine Learning (Isolation Forest) to analyze login logs and detect malicious activities such as brute-force attacks, password spraying, and unusual login behavior.

AI-powered Security Log Analyzer using Python and Ollama for Windows Event Logs and Linux auth logs with MITRE ATT&CK mapping and incident summaries.

AI-powered SOC Assistant for intelligent security alert analysis, MITRE ATT&CK mapping, and automated investigation guidance

AI-powered phishing email analyzer for .eml files - Detect phishing attempts, analyze headers, URLs, attachments, and get AI-powered risk assessments

AI-powered threat intelligence platform for automated IOC collection, malware campaign detection, and relationship mapping.

🔐 AI-powered CVE vulnerability analysis tool with real-time NVD integration. Free security assessment with Console, JSON & HTML reports.