Back to Projects

HuntMaster-AI

AI threat hunting assistant that converts hunting hypotheses into SIEM queries and searches security datasets for attacker behavior.

artificial-intelligencecybersecurityduckdblog-analysismitre-attackpythonsiemstreamlitthreat-hunting
View on GitHubDownload ZIP
0
Stars
0
Forks
0
Watchers
0
Open Issues

README.md

# HuntMaster-AI

HuntMaster-AI is an AI threat hunting assistant that converts hunting hypotheses into SIEM queries (Splunk SPL, Microsoft Sentinel KQL, Sigma) and executes local searches against security datasets for attacker behavior.

## Features
* **Natural Language to SIEM Queries:** Converts threat hunting hypotheses into executable queries for major SIEM platforms.
* **Local Dataset Hunting:** Upload CSV or JSON log files to immediately hunt for anomalies using automatically generated SQL executed via DuckDB.
* **Schema Awareness:** Analyzes the uploaded dataset schema to generate accurate and relevant search parameters.
* **Completely Free:** Runs locally and integrates with the free tier of Google's Gen AI API.

## Screenshots

### Application Interface & Data Upload
![Initial UI](screenshots/initial_ui.png)

### Query Generation & Hunting Results
![Hunting Results](screenshots/hunting_results.png)

## Author
* **Abdul Muqeet Tabraiz**
* **LinkedIn:** [https://www.linkedin.com/in/abdul-muqeet-tabraiz/](https://www.linkedin.com/in/abdul-muqeet-tabraiz/)
* **GitHub:** [https://github.com/JuttSahib1999](https://github.com/JuttSahib1999)

## Version
v1.0.0 (Final Release)

## License
This project is licensed under the MIT License - see the LICENSE file for details.