Dev.to
7/5/2026

The original title is: "How we built KoshurLock Holmes: an AI forensics tool for investigating data breaches"
Original: How we built KoshurLock Holmes: an AI detective for cyber attacks, and the night it almost broke me
Short summary
KoshurLock Holmes is an AI forensics tool that correlates scattered log data to investigate breaches using a knowledge graph with multi-hop reasoning. Built during a hackathon with free APIs (Groq, FastEmbed) and PostgreSQL, it can exonerate wrongly accused employees by uncovering true attack patterns. The project demonstrates how modern AI can automate expensive digital forensics work.
- •AI-powered knowledge graph correlates security logs across systems to investigate breaches and link evidence
- •Self-hosted architecture using Groq, Cognee, and PostgreSQL keeps data private and costs low
- •Hackathon project successfully demonstrated exonerating innocent employees and identifying true attackers
Generated with AI, which can make mistakes.
Is this a good recommendation for you?



