NEACD

NEACD, short for Neurosymbolic Enhanced Active Cyber Defence, aims to give analysts better tools for investigating malicious activity in complex environments. The project extracts knowledge from large streams of logs, technical data, and other evidence sources to help explain what is happening during an attack.

It combines passive monitoring, knowledge graphs, distributed analytics, machine learning, and language models. One distinctive goal is to build evidence-based causal explanations, so the result is not just an alert, but a clearer picture of why the alert may matter.