AI-SOC-Analyst-Project

This is a project as part of the Josh Madokar "The Cyber Range, AI + Cybersecurity (Advanced)" classroom

How to use:

1. Include your AI api key and log analytics workspace ID in a .env file using the env.py template (rename it to .env)
2. pip install azure-identity
3. pip install azure-monitor-query
4. pip install pandas
5. Install Azure CLI https://learn.microsoft.com/en-us/cli/azure/install-azure-cli-windows?view=azure-cli-latest&pivots=winget
6. In terminal, type az login and input your Azure credentials containing your Logs Analytics Workspace
7. You are all set! Go to _main.py and run the file.

Flowchart of the SOC agent

SOC agent example showcase

https://github.com/user-attachments/assets/b336cd4c-654d-46f3-b354-7ebd17f2cf0a