Skip to content

Commit 70f7bc3

Browse files
committed
wording
1 parent 7f4b8d7 commit 70f7bc3

File tree

2 files changed

+2
-13
lines changed

2 files changed

+2
-13
lines changed

index.html

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -578,7 +578,7 @@ <h2 class="project-title">Detection Engineering Assistant (MCP-Based)</h2>
578578
<span class="tlp-label tlp-amber">TLP:AMBER</span>
579579
</div>
580580
<p class="project-description">
581-
Architected an MCP-based intelligence layer over internal SIEM detections, enriched with public detection libraries, to automate MITRE coverage tracking, identify gaps, and generate production-ready detection logic — integrating directly into our detection-as-code workflow.
581+
Extended an open MCP server to analyze internal SIEM detections alongside public rule sets, enabling automated MITRE ATT&CK coverage tracking and gap analysis.
582582
</p>
583583
<div class="project-tags">
584584
<span class="tag">Detection Engineering</span>

projects/detection-engineering-assistant-mcp-based.html

Lines changed: 1 addition & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -339,7 +339,7 @@ <h1>Detection Engineering Assistant (MCP-Based)</h1>
339339
<div class="content">
340340
<h2>Executive Summary</h2>
341341
<p>
342-
Designed and implemented an MCP server that indexes internal detections as code and enriches them with 7,000+ public rules for context — enabling automated MITRE coverage analysis, detection gap identification, and production-ready SPL/KQL generation to support our detection engineering lifecycle.
342+
Built a detection engineering workflow around an adapted MCP server that indexes internal detections as code and correlates them with 7,000+ public rules, enabling automated MITRE coverage analysis, detection gap identification, and generation of production-ready SPL/KQL detections.
343343
</p>
344344

345345
<p>
@@ -479,17 +479,6 @@ <h2>Why This Matters</h2>
479479
design, and production-oriented architecture. It positions detection engineering as a
480480
measurable, AI-assisted discipline rather than artisanal craftsmanship.</p>
481481
</div>
482-
483-
<h2>Tech Stack</h2>
484-
<div class="architecture-flow">
485-
<span class="tech-item">Typescript</span>
486-
<span class="tech-separator"></span>
487-
<span class="tech-item">Model Context Protocol</span>
488-
<span class="tech-separator"></span>
489-
<span class="tech-item">SQLite</span>
490-
<span class="tech-separator"></span>
491-
<span class="tech-item">FTS5</span>
492-
</div>
493482
</div>
494483
</div>
495484
</body>

0 commit comments

Comments
 (0)