AI-Powered SOC Alert Triage
A Python tool that pulls the latest alert from a live Wazuh SIEM, extracts MITRE ATT&CK context, and has OpenAI write an analyst-style triage report. First I had to bring the SIEM server itself back online.
Wazuh, Python, OpenAI API, MITRE ATT&CK