Different pieces of code related to doing cybersecurity on Databricks
- uc-udfs - cybersecurity-related user-defined functions for Unity Catalog.
- vuln-info-ingest - ingestion of vulnerability data (CVE v5, GitHub advisories, OSV, CISA KEV) with Databricks Asset Bundles.
- iocs-ingest - source code for ingesting data with Filebeat's Threat Intel module.
- dlt_modern_stuff - source code that demonstrates the use of latest feature of DLT (append flows, sinks, direct publishing).
- graph-analytics-blog - source code for blog post "Graph analytics for cybersecurity data in the lakehouse".
- threat-analyst-agentbricks - an example of cybersecurity agent built on top of Databricks Agent Bricks.
- web-graph-analysis - source code for blog post "Scoring and clustering domain indicators with the Common Crawl web graph".