SecAgents
Stack
ChromaDBCrewAILangchainfastAPINextjsGPT-4o ExaAI APIOne liner
Security Agents for AWS GuardDuty Alerts
Project details
People (and companies) using AWS GuardDuty to monitor malicious activity often find themselves spending a lot of time (about 20 to 50 minutes) on each alert checking for malicious activities. To reduce this time spending, we adopted the open-source framework CrewAI. This allowed us to automate much of the investigation process, essentially cutting out the need for manual checks. With CrewAI, we've been able to create various Agents, Tasks, and Tools, including making API calls to external Cybersecurity sources. We also integrated RAG with relevant documents and playbooks to enrich the final report with remediation steps.