DFIR Engineer Builds Open-Source Cloud-Native Forensics Pipeline on GCP BigQuery

·1 views

A digital forensics and incident response (DFIR) engineer has developed Veloxamen, a lightweight, automated forensics pipeline built on Google Cloud Platform. The tool ingests and processes forensic artifacts, transforming them into a structured, queryable timeline within BigQuery, after the developer found AWS and OpenSearch-based alternatives cumbersome. Currently focused on Windows artifacts, Veloxamen is designed with an extensible architecture and plans to incorporate microservices, Looker Studio dashboards, and Vertex AI-powered anomaly detection. The project has been open-sourced on GitHub and is now available to the global DFIR and cloud security community for feedback and contributions.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Mojo: A High-Performance Programming Language Built for AI Systems

Mojo is a new programming language designed specifically for writing systems-level code optimized for AI workloads. It aims to combine high performance with usability for AI and machine learning development. One of its notable quirks is its unconventional file extension, which uses a fire emoji (.🔥). The language has drawn attention in developer communities for its focus on bridging the gap between AI research and low-level system performance. Developer Ekemini Samuel published an introductory overview of Mojo on DEV Community in August.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Databricks LTAP Architecture Proposed for Asia Real-Time Financial Markets

A private, invitation-only event called Hong Kong Databricks FSI Community Day 2026 is set to take place aboard a boat on Hong Kong Island waters, bringing together financial data professionals independent of Databricks corporation. The gathering will feature over thirty technical proposals addressing real-world financial architectures, including cross-border liquidity management and real-time streaming across Hong Kong and Singapore. One key session proposes an institutional LTAP (Lake Transactional Analytical Processing) architecture using Databricks Lakebase and Lakehouse to unify transactional applications with large-scale analytics under a single governed storage layer. Lakebase would handle low-latency transactional workflows such as trader watchlists and regulatory approvals, while Lakehouse would serve live market data queries to concurrent dashboards, APIs, and AI agents. Unity Catalog is central to the design, providing unified access control, data lineage, and audit capabilities across all workloads and jurisdictions.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Microsoft Agent Framework Supports File, Class, and Code-Based Skills in C#

A developer and speaker at Build.AI 2026 has published a detailed walkthrough on implementing Skills within the Microsoft Agent Framework (MAF) using C#. Skills in MAF are focused capability sets defined through concise prompts and supporting scripts, enabling large language models to invoke specific functions. The framework supports multiple skill types, including file-based, class-based, code-defined, and MCP-based skills, with most scripts currently written in Python due to C# scripting limitations. MAF selects skills through a four-step process — advertise, load, execute, and respond — injecting skill descriptions into the system prompt for the LLM to reference. The post also contrasts Skills with Workflows, noting that Skills suit flexible, single-domain tasks while Workflows are better for deterministic, multi-step processes with real-world side effects.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

New Benchmark Tests If AI Models Know When to Admit They Can't Answer

A developer has created a 200-item benchmark called ESCALATE to measure whether AI models can recognize the limits of their own knowledge, not just whether they answer correctly. Each task includes a deliberate "unanswerable" scenario in roughly one in five items, where the only correct response is to escalate rather than guess. The benchmark spans four task types — routing, classification, judgment, and grounded question-answering — and scores models on both accuracy and false-confidence rate. The project compares frontier models hosted on Kaggle against small open-source models ranging from 1B to 8B parameters running locally on a single laptop. The author has pre-registered predictions before results are in, including the hypothesis that some small local models may show lower false-confidence rates than certain frontier models.

0 comments Read more at DEV Community