Balavignesh Thirumoorthy
Helping businesses turn ideas into high-converting websites
New to Contra
Balavignesh is ready for their next project!
1. The Core Idea & Purpose
AttackChain AI was built as an investigation platform for SOC (Security Operations Center) analysts.
When cyberattacks happen in banking and enterprise networks, they rarely trigger a single massive alert. Instead, they produce dozens of low-priority, disconnected logs across VPNs, Windows endpoints (Sysmon/EventLogs), and web firewalls.
Analysts normally spend hours manually correlating IP addresses, usernames, process GUIDs, and timestamps in spreadsheets. This project automates that end-to-end investigation process.
2. How the Engine Works (Under the Hood)
The backend pipeline operates in strict, verifiable stages:
Ingestion & Normalization: Telemetry logs (Windows Event Logs, Sysmon, network traffic) are parsed into standardized entity events (Hosts, IPs, Users, Hashes, Processes).
Threat Intelligence Enrichment: Known malicious indicators (TOR exit nodes, command-and-control servers, known attack signatures) are flagged.
MITRE ATT&CK Mapping: Each event is tagged with industry-standard tactics and techniques (e.g., T1078 Valid Accounts, T1059 Command & Scripting, T1048 Exfiltration).
Deterministic Correlation: A graph-based correlation engine links events across time windows, shared identities, and parent-child process chains without relying on AI guesswork.
100-Point Transparent Risk Scoring: Computes a verifiable risk score based on kill-chain progression, asset criticality, and tactic diversity.
Optional AI Narrative: Claude 3 Opus generates an executive briefing and incident narrative based strictly on verified findings.
3. Real Telemetry Dataset
The project demonstrates its capabilities on real-world attack data curated from the Splunk Boss of the SOC (BOTS) v1 competition dataset, simulating authentic multi-stage enterprise breaches (credential theft, lateral movement, database reconnaissance, and data exfiltration).
4. Enterprise-Grade Investigation Workspace
The frontend is designed like Tier-1 enterprise security tools (CrowdStrike Falcon, Microsoft Sentinel, Palantir):
3-Pane Investigation View:
Left Pane: Incident metadata, MITRE progression badge, severity stats, and quick actions.
Center Pane: Interactive visual Evidence Graph (powered by React Flow) and a step-by-step Attack Timeline Replay.
Right Pane: Deep-dive evidence drawer, technical IOC breakdown, SOC response playbooks (Host Isolation, Credential Revocation), and an interactive SOC AI Copilot.
MITRE Coverage Matrix: Heatmap showing covered tactics across the entire incident.
Executive PDF / Export Ready: Structured for instant reporting to CISOs and compliance teams.
0
5
Prism OS reimagines digital commerce by replacing static product grids and multi-step checkout funnels with an autonomous, multi-modal AI shopping agent. Built with a LangGraph state machine backend and a Next.js 15 Generative UI frontend, it enables natural conversational shopping, visual image search, dynamic product comparison matrices, and 1-click inline checkouts paired with a real-time Merchant Command Center for fraud and review authenticity auditing.
0
12
Designed and developed a premium portfolio showcasing my full-stack engineering capabilities. Built with Next.js, TypeScript, Tailwind CSS, Framer Motion, and Supabase. The site focuses on performance, SEO, accessibility, and conversion, featuring interactive animations, case studies, contact automation, analytics, and a scalable architecture optimized for production deployment.
1
22
Woof Heaven — Multi-Service Hospitality Platform
Designed and built a full-stack website and booking platform for Woof Heaven, a restaurant, turf, spa, and pool destination in Coimbatore. The platform brings all four service lines together under one seamless experience — letting customers discover, explore, and book directly online instead of relying on phone calls.
Built a custom admin dashboard giving the business full control over content, bookings, and customer enquiries, with WhatsApp integration for instant customer contact. The site is fast, mobile-optimized, and designed to reflect the premium hospitality experience Woof Heaven delivers in person.
Tech used: Next.js, FastAPI, Supabase, PostgreSQL, Cloudinary
Scope: UI/UX design, full-stack development, booking system, admin dashboard, deployment
0
24