Check its license. It has its own license: read it before using it for work.

Is AI_SOC still maintained?

Yes, active. Last change 2 months ago.

Some track record. 176 stars, 1 years old. Get it from the official repo and read what it installs.

Reading the repo

Opening the box…

How to install on Windows

zhadyz/AI_SOC

Open-source AI-augmented Security Operations Center using LLMs + Multi-Agent Orchestration | Foundation-Sec-8B | Wazuh | TheHive | RAG

Python

Before you start

Is it free?: Check its licenseIt has its own license: read it before using it for work.
Still maintained?: Yes, activeLast change 2 months ago.
Can I trust it?: Some track record176 stars, 1 years old. Get it from the official repo and read what it installs.

Difficulty: Involved
Time: 30 min or more
Stars: ★ 176
Activity: Updated 2 months ago

Saved setup from 5 h ago

Will it work on Windows?

Yes, it runs on Windows

You'll build it yourself with Python.
It also needs PostgreSQL running (Docker handles this).

Your system

macOS Windows Linux

Start here

Website ↗research.onyxlab.aiThe project's own site.

Heads-upIt also needs PostgreSQL and 28 settings in .env (6 secret).

Launch script in the repo

The maintainers included START-AI-SOC.bat. Run it from the cloned folder after reading it.

.\START-AI-SOC.bat

Also: scripts/setup-configs.sh

5 steps on Windows

Download setup.ps1

Then run powershell -ExecutionPolicy Bypass -File .\setup.ps1. It stops at the first error and is safe to run again. Servers and tests aren't started; it lists them at the end. Read it first.

1
Clone the repository
Needs Git: winget install Git.Git
```
git clone https://github.com/zhadyz/AI_SOC.git
cd AI_SOC
```
2
Install the required runtimes
Python 3.x
```
winget install Python.Python.3.12
```
3
Configure environment variables
Fill in secrets: AI_SOC_API_KEY, POSTGRES_PASSWORD, AI_SOC_AUTH_SECRET, AI_SOC_MODEL_SIGNING_KEY, TRIAGE_MAX_TOKENS, TRIAGE_API_KEY_ENABLED
```
Copy-Item .env.example .env
```
4
Start backing services
Needs: PostgreSQL
```
winget install Docker.DockerDesktop
docker compose -f compose.yaml up -d
```
If you see Cannot connect to the Docker daemon: start Docker Desktop (or the Docker service) first.

Install dependencies

python -m venv .venv
.venv\Scripts\Activate.ps1
pip install -e .

Did you get it running?

No reports for Windows yet.

Still stuck? Get a written guide

GitManual AI Agent reads the 9 key files and writes a step-by-step guide for Windows. Once written, it's saved for everyone.

Parts list

1×Python 3.xruntime
1×pip package manager
1×PostgreSQL service

28× settings in .env

AI_SOC_API_KEYsecret
POSTGRES_PASSWORDsecret
AI_SOC_AUTH_SECRETsecret
AI_SOC_MODEL_SIGNING_KEYsecret
AI_SOC_IDENTITY_DIR
OLLAMA_MODEL
TRIAGE_SERVICE_NAME
TRIAGE_SERVICE_VERSION
TRIAGE_LOG_LEVEL
TRIAGE_OLLAMA_HOST
TRIAGE_PRIMARY_MODEL
TRIAGE_FALLBACK_MODEL
TRIAGE_LLM_TEMPERATURE
TRIAGE_LLM_TIMEOUT
TRIAGE_MAX_TOKENSsecret
TRIAGE_HIGH_CONFIDENCE_THRESHOLD
TRIAGE_MEDIUM_CONFIDENCE_THRESHOLD
TRIAGE_AUTO_ACTION_THRESHOLD
TRIAGE_ML_ENABLED
TRIAGE_ML_API_URL
TRIAGE_ML_TIMEOUT
TRIAGE_ML_DEFAULT_MODEL
TRIAGE_RAG_ENABLED
TRIAGE_RAG_SERVICE_URL
TRIAGE_RAG_TOP_K
TRIAGE_MAX_CONCURRENT_REQUESTS
TRIAGE_REQUEST_TIMEOUT
TRIAGE_API_KEY_ENABLEDsecret

Share this manual

Is this your repo?

Add a badge to your README so newcomers find these steps.

[![Setup manual](https://gitmanual.com/zhadyz/AI_SOC/badge.svg)](https://gitmanual.com/zhadyz/AI_SOC)

Good to know

Dockerfile available (base image: python:3.11-slim).
Nested projects: dashboard/requirements.txt, lab/requirements.txt, ml_training/requirements.txt, services/alert-triage/requirements.txt and 9 more

Details

License: Not detected
Open issues: 1
Branch: master

Files we read (9)

.env.example

.github/workflows/cd.yml

.github/workflows/ci.yml

.github/workflows/unified-docs-portal.yml

Dockerfile

README.md

compose.yaml

pyproject.toml

services/alert-triage/.env.example

416 files in the repo

Yes, it runs on Windows

Start here

5 steps on Windows

Clone the repository

Install the required runtimes

Configure environment variables

Start backing services

Install dependencies

Did you get it running?

Still stuck? Get a written guide