SentinelAI — AI-Powered SOC Copilot

Upload security logs → Get instant threat analysis, MITRE ATT&CK mapping, and a downloadable incident report — powered by Groq AI (LLaMA 3). Features Log Upload — Drag & drop .txt, .log, or .csv log files AI Threat Analysis — Severity rating, threat type, affected systems, IoCs MITRE ATT&CK Mapping — Automatic technique ID mapping (T1566, T1059, etc.) Response Actions — Actionable remediation checklist Incident Report — Auto-generated, downloadable professional report Tech Stack Layer Technology Frontend HTML + CSS (dark SOC theme) Backend Python + Flask AI Groq API (LLaMA 3 8B) Deploy Render Local Setup

# 1. Clone the repo
git clone https://github.com/yourusername/sentinelai.git
cd sentinelai

# 2. Create virtual environment
python -m venv venv
source venv/bin/activate   # Windows: venv\Scripts\activate

# 3. Install dependencies
pip install -r requirements.txt

# 4. Add your Groq API key
echo "GROQ_API_KEY=your_key_here" > .env

# 5. Run
flask run

Open http://localhost:5000 Deploy on Render Push to GitHub Create new Web Service on render.com Set environment variable: GROQ_API_KEY Build command: pip install -r requirements.txt Start command: gunicorn app:app Sample Logs Test with included sample logs in /sample_logs/: ssh_bruteforce.log — SSH brute force + privilege escalation phishing_attack.log — Phishing + credential theft + data exfiltration Author Built by Bhavya | B.Tech CSE, Andhra University