3 ms·

Looks similar to what we built! https://www.getbuff.io/ https://www.getbuff.io/ We're taking a more open source approach to get feedback from others in this sp

• freeqaz 4y ago
  We've actually been using Buff as a chat bot on our Discord server to iteratively explore vulnerability data (CVEs) using AI. For example: > @Buff What is Log4Shell? >> Log4Shell is a vulnerability named by LunaSec. It affects users of the log4j packages, primarily in Java but also in Scala, Groovy, and Clojure. "Log4Shell Guide: How To Detect and Mitigate the Log4Shell Vulnerability (CVE-2021-44228 & CVE-2021-45046)" is available on LunaTrace. >> SOURCES: https://www.lunasec.io/docs/blog/log4j-zero-day-mitigation-guide https://www.lunasec.io/docs/blog/log4j-zero-day-mitigation-g... The idea is that we can ingest unstructured data from GitHub Security Advisories (and the links they link to, like that LunaSec blog post) and then "query" that dataset with natural language. If you'd like to play around with it yourself, feel free to join and try it out in our Discord. https://discord.gg/dtGHzZK6Cq https://discord.gg/dtGHzZK6Cq (It only has a few vulns of data in it right now and we're scraping the data to train it right now. Any ideas that others have to share would be awesome!)