AI for Threat Hunting

AI enhances threat hunting by identifying anomalies in large log datasets.

python
from openai import OpenAI
client = OpenAI()
def analyze_log_anomaly(log_entry: str) -> dict:
    r = client.chat.completions.create(
        model="gpt-4o",
        messages=[{"role":"system","content":"You are a cybersecurity analyst. Analyze logs for threats."},{"role":"user","content":f"Analyze: {log_entry}"}]
    )
    return {"assessment": r.choices[0].message.content, "is_threat": "malicious" in r.choices[0].message.content.lower()}

Applications: SIEM enhancement, IoC extraction, alert triage.