SShortSingh.
TopTechnologyAI & MLStartupsProgrammingScienceBusinessFinanceCrypto & Web3World
Back to feed
Programming

Dev-Turned-Security-Learner Builds IOC Enrichment Tool to Bridge Skills Gap

0
·1 views

A full-stack developer transitioning into cybersecurity has built a beginner-level threat intelligence tool called IOC Enricher while working toward a SOC Analyst role. The web-based tool accepts an IP address, domain, or file hash and queries VirusTotal, AbuseIPDB, and MalwareBazaar in parallel, returning a combined risk score and an AI-generated plain-English summary. Built on a FastAPI backend with a Next.js frontend and Groq for AI summaries, the project was designed to automate a repetitive manual lookup workflow common in SOC investigations. During development, the creator encountered a silent authentication failure with MalwareBazaar that returned no data without raising an error, highlighting the danger of tools that appear functional while producing incomplete results. The project is publicly available and documented primarily as a learning record, with planned improvements including bulk lookups and Shodan integration.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Log in to join the discussion and vote.

Log in

Related stories

0
ProgrammingDEV Community ·

Engineer uses single OpenTelemetry attribute to compare service versions in SigNoz

A software engineer demonstrated how to detect performance regressions between service deployments using SigNoz, an open-source observability platform, and a single OpenTelemetry resource attribute called service.version. The method allows side-by-side latency comparison of two versions of the same service without custom tooling or additional pipeline setup. The engineer set up a local Kubernetes cluster using Kind, installed SigNoz via Helm, and used the telemetrygen tool to generate synthetic OTLP traces with different version attributes. A key finding was that default telemetrygen spans produce uniform microsecond-scale latency, requiring the --span-duration and --rate flags to simulate realistic workload differences. The approach offers a low-overhead way to catch slow releases before customers do, using only built-in SigNoz Query Builder features.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Engineering Team Cuts RAG Pipeline Latency 40% With Bayesian Search and Hybrid Retrieval

A development team rebuilt their Retrieval-Augmented Generation (RAG) pipeline from scratch after standard production deployments revealed significant performance gaps, including latency exceeding one second per query. The team replaced fixed 512-token chunking with document-type-specific strategies, including recursive, semantic, and agentic chunking, achieving recall@10 scores between 91% and 97% across different content types. They combined vector search with BM25 keyword search using Reciprocal Rank Fusion, then applied a cross-encoder reranker to narrow 50 candidate results down to 5, adding only 50ms of latency while improving recall by 15%. A Bayesian-informed search optimization approach was also introduced to tune retrieval parameters systematically, ultimately reducing overall pipeline latency by 40%. The team shared code implementations and a production configuration table to help other engineers replicate the approach across legal, API documentation, support ticket, and internal wiki use cases.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Developer Builds Free, Client-Side PDF Signer That Never Uploads Your Files

A developer built MyDigitSign, a free open-source PDF signing tool, after growing frustrated with online services that upload sensitive documents to remote servers and hide features behind paywalls. The app runs entirely in the browser using Next.js, meaning no files ever leave the user's device. Users can create a signature by drawing, typing, or uploading an image, then drag and position it on their PDF before downloading the final file locally. The tool requires no account or registration and is available at mydigitsign.com with source code published on GitHub. Electronic signatures generated this way are legally valid for most agreements under laws such as the US ESIGN Act and the EU's eIDAS regulation.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Solo dev ships support chat widget across seven platforms, details what each really takes

A solo developer building DeskCrew, an AI-powered support helpdesk, this week distributed a single chat widget across seven platforms including WordPress, Shopify, npm frameworks, Discourse, and Framer. Each platform required a different delivery mechanism, review process, and presented its own technical pitfalls. On npm, a silent auth failure caused a misleading 404 error instead of a 401, while Shopify's review was unexpectedly smooth because the app requested zero API scopes, qualifying it for a faster track. Discourse required no marketplace submission at all — just a public GitHub repo that forum admins can install directly. The developer documented the full process to fill a gap left by platform marketing pages, which rarely explain the real-world friction involved in multi-platform distribution.

0 comments Read more at DEV Community