Inside the AI x Security Arsenal I’ve Built

This blog-style retrospective surveys a broad set of projects that fuse generative AI with threat intelligence and security operations, including IAT extraction tooling (IATelligence), report summarization via LLMs, a MSTICpy-based CTI agent, RAG over MITRE ATT&CK, multilingual leak exploration (ISOON) and ransomware leak triage (BlackBasta) with hybrid search, phishing analysis through browser/computer-use agents, a YARA-focused DocYara assistant, GraphRAG IOC enrichment, PCAP analysis with HYDE, and the NOVA prompt-pattern matching framework with MCP integrations and scanners; it concludes with reflections on GenAI’s practical value for CTI and a call for practitioners to adapt to evolving AI-driven workflows.