ZeroTrace shifts security telemetry from static signature scanning to pure behavioral provenance reasoning. It ingests raw OS execution logs, utilizing a local air-gapped Gemma 4 model (zerotrace-analyst) via Ollama to autonomously analyze adversary intent in real-time. Featuring a Next.js 15 Bauhaus SOC Dashboard and an Express/TypeScript SSE streaming backend, it delivers sub-second threat detection, automated MITRE ATT&CK mapping, and 1-click incident response

Built With

Share this project:

Updates

Submission history