Security tooling Running
AEGIS · DeepRoot
Endpoint telemetry with an AI triage layer. Installs and manages Sysmon on a Windows host, ingests events in real time, assigns severity by rule, then escalates the interesting ones through a tiered model chain rather than paying for the whole firehose.
Everything lands in a dashboard over a REST and WebSocket API. Storage is tiered so only the events that matter are kept.



