Found 43 repositories(showing 30)
Leegreen305
No description available
nicholasmagner
Autonomous SOC Analyst (Agentic AI Security Automation)
chalithah
Agentic SOC Analyst: A secure, local MCP server connecting Claude AI to Splunk Enterprise. Natural language threat hunting without data leaving your network.
TrevinoParker7
No description available
AlexMamm
Simple AI Agent for SOC Analysts
marcopsd-dev
No description available
cwccie
SentinelForge: Autonomous SOC analyst platform with AI agents for alert triage, log correlation, threat hunting, and incident response.
Hanish0
ThreatSage is a computer AI-based security agent that mimics the analyst's thinking within a Security Operations Center (SOC). It will analyze suspicious logs, enrich IP, and suggest actionable replies—driven by LLMs.
This project is an AI-powered multi-llm agent SOC (Security Operations Center) assistant that helps analysts investigate and triage security alerts. It leverages LangChain, LangGraph, and external threat intelligence APIs to automate enrichment and analysis.
peterhunter99001-cyber
An enterprise grade autonomous agentic operations platform engineered to detect, triage, and respond to threats across local area network environments while operating within strict governance and security guardrails.
Nislive
No description available
danchristopher02
An intelligent, automated SOC assistant that analyzes security alerts, triages incidents, and generates detailed investigation reports using AI.
vansh-devgun
No description available
WillyMcClanathan
AI-enhanced Security Operations Center (SOC) automation platform built with Python, SQLite, and Agent Zero. Implements log ingestion, detection engineering (SSH brute force & web scanning), incident lifecycle management, and AI-generated threat analysis via a local web dashboard.
daniyal-khan-graymatrix
No description available
Anshyaansh
AI-Driven SOC Automation Pipeline: Built with Python, Kali Linux, and Airia.ai to capture live malicious traffic (like SSH brute-force and ICMP floods), automatically calculate risk scores, and generate Tier-1 analyst reports using a strict defensive AI playbook.
Shyamsundar0606
AI-powered SOC analyst dashboard for alert triage, severity classification, MITRE ATT&CK mapping, and incident response guidance using a free local rule-based engine.
trocha12
An automated Tier-1 Security Operations Center (SOC) Analyst agent built using LangChain, LangGraph, and Google Gemini. This tool autonomously investigates security alert tickets by correlating data across multiple security platforms to generate a comprehensive incident report.
No description available
mitchel-adams
No description available
ISMAILELOUAZZANI
No description available
ChauPham-Security
An AI-assisted SOC workflow built in Python to help analysts investigate suspicious activity in Azure environments using Log Analytics, Microsoft Defender, and OpenAI.
gmcleod1
AI-Powered SOC Analyst Agent with Azure ELK Stack integration
Deez-Automations
Autonomous SOC alert triage agent. Reduces analyst burnout using AI and reinforcement learning.
Abirock7
AI-powered SOC Analyst home lab using Python, packet capture, and an AI triage agent.
Ikem98
AI-powered SOC analyst agent for threat detection, vulnerability management, and automated response.
rishikesh-e
Autonomous SOC Analyst Agent (ASAA) simulates a Tier-1 SOC analyst by detecting anomalous behavior from application logs and autonomously generating security incidents with explanations and remediation steps using agentic AI.
Dyuti01
A simulated compromised Linux server where an AI agent acts as a Tier-1 SOC analyst.
pcap-ai
Professional MCP server for deep packet inspection. Transform Claude and AI agents into autonomous SOC analysts.
ahsan091
AI-Powered SOC Analyst Agent — Automated security log analysis, threat detection, MITRE ATT&CK mapping, and incident report generation