File size: 1,217 Bytes
26e1c2e
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
---
title: Murshid - مُرشِد
emoji: 🛡️
colorFrom: blue
colorTo: indigo
sdk: docker
pinned: false
license: mit
---

# 🛡️ Murshid | مُرشِد

**From Alerts to Guidance: MITRE ATT&CK-Aligned Techniques Mapping for SOC Analysts**

REST API + Dashboard for analyzing Wazuh IDS rules and mapping them to MITRE ATT&CK techniques.

## Features

- **Rule Analysis**: Parse Wazuh XML rules and classify MITRE ATT&CK techniques
- **WQL Queries**: Get pre-built Wazuh Query Language templates per technique
- **Dashboard**: Interactive web UI with statistics and DB viewer
- **ML Pipeline**: Logistic Regression with SecureBERT+ embeddings

## Tech Stack

- **FastAPI** — REST API
- **SQLite** — Database
- **Logistic Regression** — Primary classification model
- **SecureBERT+** — Text embeddings (optional, requires torch)

## API Endpoints

| Method | URL | Description |
|--------|-----|-------------|
| `GET` | `/health` | System health check |
| `POST` | `/rules/analyze` | Analyze a Wazuh XML rule |
| `GET` | `/results/{rule_id}` | Get stored results for a rule |
| `GET` | `/queries/{technique_id}` | Get WQL templates for a technique |
| `GET` | `/docs` | Interactive Swagger documentation |