Skip to content
#

false-positive-reduction

Here are 10 public repositories matching this topic...

GUARDIUM is an intelligent Wazuh rule optimization framework designed to reduce false positives, improve alert accuracy, and assist SOC teams in maintaining high-quality SIEM detections. GUARDIUM combines rule analysis, threat context, and Large Language Models (LLMs) to automatically evaluate, explain, and optimize Wazuh rules.

  • Updated Jan 21, 2026
  • Python

Analytical portfolio demonstrating transaction monitoring, judgment-based alert review, and Excel-driven risk analysis across fraud, AML, and KYC workflows, with a focus on regulator-safe decisioning and operational consistency.

  • Updated Feb 3, 2026

Python security gate with intelligent ML scoring that reduces false positives by 95%. Orchestrates Bandit, pip-audit, and Semgrep into a unified CI/CD pipeline. Includes baseline management, policy enforcement, and explainable predictions. Production-ready with comprehensive tests.

  • Updated Jan 24, 2026
  • Python

Research-grade architecture for memory-augmented, agentic AI in SOC alert analysis. Combines Episodic, Semantic, Procedural, and Working memory with LLM reasoning (FastAPI) for context-aware threat analysis and false positive reduction. Prototype; not production-validated.

  • Updated Apr 16, 2026
  • Python

A Claude Skill that adjudicates sanctions / PEP / adverse-media screening hits deterministically. Token-efficient tiered design (parse → cheap FP rules → identifier corroboration → targeted multilingual research). Handles 9+ naming conventions, transliterations, and historical place names.

  • Updated May 18, 2026

Improve this page

Add a description, image, and links to the false-positive-reduction topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the false-positive-reduction topic, visit your repo's landing page and select "manage topics."

Learn more