Major project
Cybersecurity & Digital Trust
Threat intelligence and advisories assistant
A RAG assistant over CERT-In advisories, the DPDP Act and MITRE ATT&CK that answers analysts with sources.
The brief
Security analysts need quick answers: is this vulnerability in a CERT-In advisory, which ATT&CK technique is this, what does the DPDP Act require after a breach? Build an assistant over these sources that answers with the exact advisory, technique or section, and says when it does not know. Good looks like: retrieval compared on 50+ analyst questions, citations on every answer, and refusals when unsure.
What you will build
- Collect CERT-In advisories, the DPDP Act and ATT&CK data
- Parse and chunk with source metadata
- Build hybrid retrieval with re-ranking
- Write 50+ analyst questions with the right source
- Evaluate faithfulness and retrieval recall
- Deploy with citations and an "I don't know" path
Free, open data to build it with
- CERT-In advisories ↗ Indian Computer Emergency Response Team
- MITRE ATT&CK ↗ MITRE
- Digital Personal Data Protection Act ↗ Ministry of Electronics and Information Technology
Check each dataset's licence before you publish your work. Your mentor gives your team its own version of the brief (data, scope or region), so every team's project is its own.