Stop ranking alerts by CVSS. Correlate exposure + privilege + behaviour into one reviewable case — and publish what it costs in false positives. Local-first, no LLM, 0 deps.

blue-team detection-engineering false-positives incident-response log-analysis python security security-tools siem threat-detection
3 Open Issues Need Help Last updated: Sep 12, 2026

Open Issues Need Help

View All on GitHub
help wanted good first issue

Stop ranking alerts by CVSS. Correlate exposure + privilege + behaviour into one reviewable case — and publish what it costs in false positives. Local-first, no LLM, 0 deps.

Python
#blue-team#detection-engineering#false-positives#incident-response#log-analysis#python#security#security-tools#siem#threat-detection

Stop ranking alerts by CVSS. Correlate exposure + privilege + behaviour into one reviewable case — and publish what it costs in false positives. Local-first, no LLM, 0 deps.

Python
#blue-team#detection-engineering#false-positives#incident-response#log-analysis#python#security#security-tools#siem#threat-detection
help wanted tester-wanted connector

Stop ranking alerts by CVSS. Correlate exposure + privilege + behaviour into one reviewable case — and publish what it costs in false positives. Local-first, no LLM, 0 deps.

Python
#blue-team#detection-engineering#false-positives#incident-response#log-analysis#python#security#security-tools#siem#threat-detection