Reproducible multi-sensor NDR instrument (C++20). Correlates aRGus (ML) + Suricata + Zeek + Wazuh into a Kuzu graph by community_id; characterizes each lens's bias vs labelled ground truth. A forensic record of where ML-for-NIDS actually fails. Research artifact, not production.
bash vagrant protobuf debian pipeline cpp graph arrow zeromq python3 etcd ndr hashicorp-vault ipset jenkins-pipeline random-forest-classifier kuzu fast-path kernel-ebpf
-
Updated
Aug 7, 2026 - HTML