Skip to content

Instantly share code, notes, and snippets.

View Mikaayenson's full-sized avatar

Mika Ayenson Mikaayenson

35 followers · 17 following
View GitHub Profile
@Mikaayenson
Mikaayenson / Proposed Security Fields for LLM Threat Detection.md
Last active May 2, 2024 03:48
Category Field Type Description
General LLM Interaction Fields gen_ai.prompt text The full text of the user's request to the gen_ai.
gen_ai.usage.prompt_tokens integer Number of tokens in the user's request.

|

@Mikaayenson
Mikaayenson / esql_ci_validation.yml
Last active November 14, 2023 22:43
Sample ES|QL Rule Validation
name: ES|QL Validation
on:
push:
branches:
- main
workflow_dispatch:
inputs:
target_branch:
description: 'Target Detection Rules Branch (e.g. esql_testing)'
required: true
@Mikaayenson
Mikaayenson / elastic_security_openapi_spec.yaml
Last active May 2, 2023 14:57
Elastic Security APIs OpenAPI Spec
openapi: 3.0.0
info:
title: Elastic Security SIEM Signals API (https://www.elastic.co/guide/en/security/current/security-apis.html)
version: 1.0.0
servers:
- url: 'http://{kibana_host}:{port}'
paths:
/api/detection_engine/index:
summary: Signal index operations (used to store detection alerts)
post:
@Mikaayenson
Mikaayenson / sample_chatgpt_security_use_case.py
Last active September 2, 2023 17:29
Sample use case to demonstrate applying the new chatGPT model to security summaries.
import openai
import requests
import textwrap
import uuid
# pip3 install openai requests
# setup the API credentials
es_username = "<your username>"
es_password = "<your password>"
es_url = "https://localhost:9200"