ABHEDYA
AGENTIC AI & AUTONOMOUS WORKFLOWS:
Agents that plan, use tools, and execute multi-step tasks.
CHANDRAKALA A S
What problem are you solving?
• Security teams receive too many alerts from servers, accounts, networks and cloud systems.
• Manual investigation makes it difficult to connect related events quickly.
• Important attacks can be missed or handled too late.
• Example: repeated failed logins → unusual successful login → sensitive file download.
Alert overload
Many events; limited analyst time.
Slow investigation
Evidence is spread across logs.
Delayed response
Threats may cause more damage.
Describe your solution. How different is it from any of the other existing ideas?
Cyber Sentinel AI uses a coordinated team of AI agents to investigate suspicious activity and support safe response.
1. Log Analysis
Find suspicious patterns
2. Threat Intel
Check IPs / indicators
3. Event Correlation
Connect related events
4. Investigation
Build attack timeline
5. Risk Assessment
Prioritize severity
6. Response
Suggest next actions
Key difference: event correlation + evidence-backed investigation + human-approved response + verification.
List of features offered by the solution
Log ingestion
Upload CSV / JSON security logs
Threat detection
Rules + anomaly detection
AI investigation
Six coordinated specialist agents
Attack timeline
Correlate users, IPs and events
Risk scoring
Low / Medium / High / Critical
Response workflow
Approve, simulate/execute, verify
Example alert path
Logs
Detect
Investigate
Approve
Verify
Workflow / Idea
�
1
Collect logs
2
Detect anomaly
3
Investigate with agents
4
Correlate & score risk
5
Human approval
6
Respond & verify
Technology stack
• Frontend: React.js + Tailwind CSS
• Backend: Python + Fast API
• Agent orchestration: Lang Graph; LLM: Gemini API
• Detection/data: Scikit-learn + Pandas
• Database: PostgreSQL / Supa base
• Security context: Wazuh + MITRE ATT&CK (integration-dependent)
High-level architecture diagram
Analyst / Admin
React Dashboard
FastAPI Backend
LangGraph
Orchestrator
6 AI Agents
Supporting services
Rules + ML
Scikit-learn
LLM
Gemini API
Threat context
Wazuh / MITRE
Database
PostgreSQL
Response loop
Risk + evidence report
Human approval gate
Authorized action + verification