Darryl Strucko

Security-focused AI for alert correlation, incident matching, and threat hunting.

Problem

Security teams must identify meaningful threats across large volumes of alerts, often without knowing whether similar activity has occurred before. Traditional keyword searches can miss related events described in different ways. This prototype explores how security-trained language models can recognize threat patterns, connect related events, and provide relevant context for investigations.

Approach

•Use SecureBERT embeddings to identify similar incidents and correlate related alerts.

•Visualize security event clusters, relationships, and outliers.

•Combine semantic retrieval with Groq AI (openai/gpt-oss-120b) to generate investigation summaries and hunt plans.