How mayankbajaj21/security-operations-dashboard works
This repository is an AI-assisted security operations dashboard: analysts sign in, view aggregated security telemetry and threat intelligence, investigate incidents and attack chains, and review risk and mitigation analytics. The React application requests data through its API client; FastAPI registers the REST surface, and the sampled authentication flow persists identities in MongoDB. The tree also documents prediction, vulnerability, posture, reporting, and MITRE capabilities. Their precise runtime wiring is not shown in the excerpts, so those links are not inferred.
Main entry points: main.py FastAPI entry · App.jsx Dashboard app · api.js API client · auth.py Authentication routes
Components 23
Analyst dashboard
- Dashboard app
frontend/src/App.jsx - Investigation pages
frontend/src/pages - API client
frontend/src/services/api.js
REST API
- FastAPI entry
backend/app/main.py - REST routes
backend/app/api - Authentication routes
backend/app/api/auth.py - Risk routes
backend/app/api/risk.py - Event routes
backend/app/api/events.py - Attack-chain routes
backend/app/api/attack_chains.py - Incident routes
backend/app/api/incidents.py - Prediction routes
backend/app/api/predictions.py - Threat intelligence routes
backend/app/api/threat_intel.py - MITRE routes
backend/app/api/mitre.py
Security analysis
- Risk scoring
backend/app/services/risk_engine.py - Event correlation
backend/app/services/correlation_engine.py - Incident lifecycle
backend/app/services/incident_service.py - Threat ML
backend/ml - Posture service
backend/app/services/posture_service.py - Report service
backend/app/services/report_service.py
Identity and storage
- Authentication service
backend/app/services/auth_service.py - MongoDB connection
backend/app/core/database.py
Other components
- SOC analyst
- MongoDB
Connections 16
- SOC analyst → Dashboard app: uses
- Dashboard app → Investigation pages: renders
- Dashboard app → API client: requests data
- API client → FastAPI entry: HTTP requests
- FastAPI entry → REST routes: registers
- FastAPI entry → Authentication routes: registers
- FastAPI entry → Risk routes: registers
- FastAPI entry → Event routes: registers
- FastAPI entry → Attack-chain routes: registers
- FastAPI entry → Incident routes: registers
- FastAPI entry → Prediction routes: registers
- FastAPI entry → Threat intelligence routes: registers
- FastAPI entry → MITRE routes: registers
- Authentication routes → Authentication service: calls
- Authentication service → MongoDB connection: gets database
- MongoDB connection → MongoDB: connects