Jev 101
Start Guides
Search
中文 EN
Ops heat 1 · Quiet★ 0heat incomplete (no X)

JEV SOC Alert Triage

A MIT Python pipeline that classifies exported Windows security events with TypeSafe Jev (plus a rules baseline that runs without credentials) and routes uncertain or high-risk rows into a review queue with JSONL decision trails.

Repo: ahmed35636/jev-triage ↗

What it is

Triage Windows security exports with a decision trail.

What it does: Rules or hosted Jev classify events; uncertain rows go to review.

Why it belongs in the showcase: SOC-shaped hosted-Jev triage distinct from warehouse jev-triage.

Caveats: Demo fixture only.

Evidence

Public MIT repo, created 2026-10-30, 0 stars as of 2026-11-02. README documents rules backend demo, optional Ollama notes for escalations, synthetic ten-event fixture, pytest, and TypeSafe as model backend. Distinct from mohammedahmadi1990/jev-triage (warehouse remarks Spring Boot bench)—slug windows-soc-jev-triage avoids collision.

Caveats

  • Synthetic fixture is not a workload-reduction benchmark
  • Needs a TypeSafe key for the Jev backend path
  • Slug differs from repo name to avoid colliding with existing jev-triage

Unofficial case page. Stars / list position observed for heat; do not treat heat as a quality SLA. Review the upstream README before you depend on it.