The detection division. DeepSecu builds AI-assisted intrusion detection on top of the ELK Stack and Suricata — turning live network traffic into ranked, explainable alerts an analyst can act on.
~/jsycure/deepsecu/pipeline ▌
Inspects traffic on the wire, matches against signatures, and emits structured events for every flow, alert, and protocol anomaly.
Elasticsearch indexes the event stream; Logstash normalizes it; Kibana gives analysts a live, queryable view of what's happening on the network.
Models rank events by risk so high-signal detections rise to the top instead of drowning in volume — with features a human can interpret.
Scored detections pass to the SOAR division, where TheHive and Shuffle take over containment and case management.
Reducing false positives in IDS alerts, making model decisions explainable to analysts, and tightening the loop between detection and automated response.
~/jsycure/deepsecu/members ▌
Owns the Suricata ruleset and the Elasticsearch detection logic.