Project Down Under Shield

We are here to help and protect from cyberattack using AI and guided by best practices using SIFT

Comment

Inspiration

As a Cloud Architect I'm always aware about designing infrastructure securely. But it's always a reality that even though we have set up Landing zone for governance and apply baseline security, when apps or servers are deployed there are potentials for these to be compromised. I thought that it will be good to have a bit of understanding about digital forensic that can help design infrastructure more securely.

What it does

An AI forensic workstations that helps a security analyst investigate a potential incident using plain English to understand and investigate the request and provide readable outputs for review and feedback and improvement.

How we built it

Valhuntir virtual image for SIFT VM, Claude, Terminal, Sample infected image

Challenges we ran into

  1. Technical issues - setting up of the virtual box, running out of memory, terminal session hanging, unable to do copy and paste , disk issues
  2. ## Accomplishments that we're proud of Successful deployment and evidence testing , using simple command statements to run investigation and produce an output and then reviewing it and providing feedback and the agent doing self improvement by taking the human feedback into consideration. ## What we learned AI agents can do a lot of the leg work and used tools and mcp to do a proper investigation and producing a deterministic output that humans can read, provide feedback and the AI agents taking it as an addtional knowledge is a great and exciting result. ## What's next for Project Down Under Shield Hoping to learn mofre about digital forensic and be a contributor to these type of projects.

Built With

Share this project:

Updates