incident-triage

支持对接内部系统的 AI 排障工作台：通过 HTTP API / Webhook 接入工单与告警系统，串联代码、日志、配置和 Agent，并提供面向产品、运营、客服的 Web 自助分析页面。

Chrome extension that classifies Sentry errors with in-browser ML. Trains locally, learns from your corrections, zero backend.

Capstone Project, as part of the 5-Day AI Agents Intensive Course with Google hosted by kaggle competition.

An agentic, modular Network Operations Center (NOC) triage system designed to analyze large-scale network telemetry and generate structured, production-grade incident reports.

AI analytics platform for commerce intelligence, metric governance, and data quality triage.

One prompt for evidence-graded incident analysis, interactive reports, and actionable security takeaways.

Portfolio-grade DevOps incident triage NLP system with reproducible MLOps pipeline, FastAPI serving, async batch jobs, and model benchmark automation.

ServiceNow AI Incident Copilot that summarizes incidents, analyzes business impact, recommends troubleshooting steps, and helps support analysts make faster triage and resolution decisions.

Local-first incident triage assistant in C# using Microsoft Agent Framework with sequential AI orchestration, structured JSON triage, and deterministic severity and domain guardrails.

🛠️ Automate IT incident response using Google ADK patterns to triage alerts, run diagnostics, and manage escalation until resolution.

Machine Learning-based SOC incident triage system that processes Wazuh alerts and predicts analyst assignment using a Random Forest classifier.

Converged Incident Triage Framework

Human-in-the-loop AI intake, routing, handoff, and operations quality evaluation platform.

Open-source incident triage tool that analyzes Linux sosreport bundles and generates actionable troubleshooting summaries.

Agentic automated incident triage for Splunk: alert triggers a webhook, an LLM agent autonomously drives SPL investigation queries, and writes an AI triage report.

Dependency-free starter for redacted GitHub Actions CI and PR review rescue packets

Triage tool for product managers: paste a stack trace, failed API response or webhook payload and get a plain-language verdict, blast radius, self-checks and a draft ticket.

Python portfolio agent for deterministic triage of embedded, IoT, vision, and gateway device logs.

A Microsoft Sentinel SOC homelab in Azure, where I built and validated a basic cloud SOC workflow: data onboarding, detection, investigation, and visualization. It demonstrates practical blue-team skills in SIEM operations, KQL-based threat hunting, watchlist enrichment, and workbook reporting.

Deterministic incident triage for application logs with evidence-based findings, FastAPI and CLI interfaces, SQLite history, Docker, and CI.