AI-SOC-Agent vs AWS IReveal

Blackhat 2025 presentation and codebase: AI SOC agent & MCP server for automated security investigation, alert triage, and incident response. Integrates with ELK, IRIS, and other platforms.

Integrates with AWS security services to enable incident response and investigation through CloudTrail logs, Athena queries, CloudWatch events, GuardDuty findings, and IAM Access Analyzer for comprehensive security event analysis and threat detection.

MCP Servers

MCP Servers

8

—

—

—

Python

—

Apache-2.0

—

—

55

6