CrowdSentinel

CrowdSentinel transforms traditional SIEM querying into intelligent, framework-driven investigations using natural language. It serves as a unified security intelligence layer that links large language models to enterprise security data sources, facilitating natural language threat hunting, AI-guided investigation workflows, persistent investigation state with memory-managed IoC tracking, and multi-source analysis across Elasticsearch, EVTX logs (Chainsaw), and PCAP files (Wireshark).

主要功能

使用案例