How It Works
Stack
Data
Elastic Cloud Serverless — 73,909 Windows attack events (ECS)
Tools
Elastic Agent Builder — 6 ES|QL tools + memory, exposed via MCP
MCP Proxy
Cloud Run — REST → MCP translation, auth injection
Reasoning
Google Cloud Conversational Agents — Gemini 2.5 Flash
Memory
Elasticsearch hybrid search — ELSER sparse vectors + BM25 via RRF
Verification
Forensic Auditor — independent second Gemini pass, read-only tools
Audit
Chain-of-custody JSONL — atomic append per tool call
Dataset
EVTX-ATTACK-SAMPLES — 278 EVTX files, 2017–2023 Windows attacks
Demo Output
Real output from a full investigation across 73,909 events — attack chain, MITRE mapping, and Forensic Auditor verdict.
Forensic Auditor Result
A second independent Gemini pass re-queried Elastic with read-only tools and labeled every claim — no access to the Triage Agent's tool history.
Verified: 8
Refuted: 8
Unverifiable: 2
Every refuted claim cites the specific ES|QL query output that contradicted it. Refutals are findings too — they narrow the confirmed attack surface and eliminate false positives before the report is saved.
Security Model
