Back to feed
Dev.to
Dev.to
7/5/2026
The original title is: "How we built KoshurLock Holmes: an AI forensics tool for investigating data breaches"

The original title is: "How we built KoshurLock Holmes: an AI forensics tool for investigating data breaches"

Original: How we built KoshurLock Holmes: an AI detective for cyber attacks, and the night it almost broke me

Short summary

KoshurLock Holmes is an AI forensics tool that correlates scattered log data to investigate breaches using a knowledge graph with multi-hop reasoning. Built during a hackathon with free APIs (Groq, FastEmbed) and PostgreSQL, it can exonerate wrongly accused employees by uncovering true attack patterns. The project demonstrates how modern AI can automate expensive digital forensics work.

  • AI-powered knowledge graph correlates security logs across systems to investigate breaches and link evidence
  • Self-hosted architecture using Groq, Cognee, and PostgreSQL keeps data private and costs low
  • Hackathon project successfully demonstrated exonerating innocent employees and identifying true attackers

Generated with AI, which can make mistakes.

Is this a good recommendation for you?

Comments

Failed to load comments. Please try again.

Explore more