An autonomous SOC analyst that continuously monitors network traffic, detects attacks in real-time using lightweight ML + LLM reasoning, and automatically responds by blocking malicious IPs. License
python docker ddos pcap reverse-shell ml bruteforce reverse packet-capture network-security mitre-attack ipblocking
-
Updated
Oct 7, 2026 - Python