Developer Builds Cyber Attack Monitor Using OpenTelemetry and SigNoz at Hackathon
A developer created 'Triage', a Blue Team Security Operations Center (SOC) built on OpenTelemetry and SigNoz, as part of the Agents of SigNoz Hackathon. Unlike typical observability setups that monitor app performance, Triage tracks live cyber threats such as SQL injection attempts and TCP port scans using custom telemetry spans. The project combines a Python honeypot, a Next.js frontend deployed on Vercel, an AI threat analysis layer powered by Groq and Llama-3.1, and a SigNoz dashboard for real-time visualization. Deployment involved several critical hurdles, including misconfigured Supabase environment variables, localhost networking conflicts between Vercel and local machines, and Docker issues on an Azure VM. The project demonstrated that OpenTelemetry can be adapted well beyond standard application monitoring to serve as a lightweight security intelligence pipeline.
This is an AI-generated summary. ShortSingh links to the original source for the complete article.
Discussion (0)
Log in to join the discussion and vote.
Log in