Intelligent middleware for automated threat investigation and reporting using NLP.
-
Notifications
You must be signed in to change notification settings - Fork 0
CoSA is a secure, conversational middleware for SIEM systems. It converts natural language into validated KQL/DSL queries using RAG, DST, and FastAPI. Designed for Elastic/Wazuh, it accelerates threat detection, protects clusters, and auto-generates PDF reports.
License
ABHISHEKABHI52/CoSA-SIEM-Assistant
Folders and files
| Name | Name | Last commit message | Last commit date | |
|---|---|---|---|---|
Repository files navigation
About
CoSA is a secure, conversational middleware for SIEM systems. It converts natural language into validated KQL/DSL queries using RAG, DST, and FastAPI. Designed for Elastic/Wazuh, it accelerates threat detection, protects clusters, and auto-generates PDF reports.
Resources
License
Stars
Watchers
Forks
Releases
No releases published
Packages 0
No packages published