How kai0sama28/dae-6-month-project-files works
This repository is a professional portfolio and project workspace; its main visitor workflow is browsing the portfolio’s landing page, background, projects, and contact information. A substantial featured project is the AI-agentic SOC investigation engine, which brings together Wazuh alerts and identity/endpoint evidence. Sampled code supports evidence gathering and the API integrations, but not the engine’s complete alert-to-verdict orchestration or persistence wiring, so those links are omitted. The wider workspace also contains coursework and project artifacts, which are not runtime components.
Main entry points: index.md Landing page · evidence.py Evidence gathering · projects.md Projects · clients.py Identity client
Components 17
Portfolio Site
- Landing page
docs/index.md - About
docs/about.md - Projects
docs/projects.md - Contact
docs/contact.md - SOC triage project
Semester2/Project Ideas Security Analyst
SOC Investigation
- Alert model
ai-agentic-soc/schemas/alert.py - Evidence gathering
ai-agentic-soc/investigation/evidence.py
Telemetry Integrations
- Wazuh client
ai-agentic-soc/siem/client.py - Identity client
ai-agentic-soc/apis/clients.py - Identity API
ai-agentic-soc/apis/identity/app.py - Identity data
ai-agentic-soc/apis/identity/db.py - EDR client
ai-agentic-soc/apis/clients.py - EDR API
ai-agentic-soc/apis/edr/app.py - EDR data
ai-agentic-soc/apis/edr/db.py
Investigation State
- Investigation records
ai-agentic-soc/database/engine.py
Other components
- Portfolio visitor
- Wazuh API
Connections 12
- Portfolio visitor → Landing page: opens
- Landing page → About: links to
- Landing page → Projects: links to
- Landing page → Contact: links to
- Projects → SOC triage project: showcases
- Wazuh client → Wazuh API: queries alerts
- Evidence gathering → Identity client: queries identity
- Evidence gathering → EDR client: queries endpoint
- Identity client → Identity API: requests data
- Identity API → Identity data: reads and writes
- EDR client → EDR API: requests telemetry
- EDR API → EDR data: reads data