Skip to content
View INFOKOM-KI's full-sized avatar
🤖
Cooking
🤖
Cooking
29 followers · 1 following

Achievements

Achievement: Pull Sharkx2Achievement: Starstruck

Achievements

Achievement: Pull Sharkx2Achievement: Starstruck

Block or report INFOKOM-KI

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
INFOKOM-KI/README.md
INFOKOM-KI: Cybersecurity, Blue Team, Security Engineering Security telemetry, context, and analyst review

Explore repositories TangerangKota CSIRT Wazuh MCP Server

Defensive security SOC and SIEM Detection engineering and threat intelligence

01 / COMMAND DECK

Detect with context. Investigate with evidence. Defend by design.

INFOKOM-KI is the GitHub home for defensive cybersecurity work associated with Information Security and Cryptography Division, Department of Communication and Informatics, Tangerang City Government. We publish practical tooling for Security Operations Center (SOC) workflows, threat intelligence, detection engineering, and AI-assisted security analysis.

◈ SOC Automation

Build integrations that help security analysts retrieve, investigate, and contextualize security events.

◈ AI-Assisted Security

Explore MCP-based tool access, retrieval, and structured investigation workflows, with analyst judgment in the loop.

◈ Threat Intelligence

Connect indicators, malware-hash references, and external threat context to support defensive decisions.

◈ Detection Engineering

Develop detection content for web compromise patterns, malicious SEO activity, and Unicode-confusable techniques.

02 / FEATURED PROJECTS

SELECTED OPEN-SOURCE WORK · CLICK ANY CARD TO OPEN THE REPOSITORY

Wazuh MCP Server repository card
SOC AUTOMATION / MCP / SIEM
Wazuh MCP stars Wazuh MCP last update 		YARA Scan Judol repository card
YARA / WEB COMPROMISE / BLACK SEO
YARA Scan Judol stars YARA Scan Judol last update
YARA Check Homoglyph repository card
HOMOGLYPH / UNICODE EVASION
YARA Check Homoglyph stars YARA Check Homoglyph last update 		hashbd repository card
MALWARE HASHES / REFERENCE DATA
hashbd stars hashbd last update
Open project briefs and technical scope
PROJECT PURPOSE
Wazuh MCP Server An MCP interface for Wazuh SIEM workflows, multi-provider threat-intelligence enrichment, MITRE ATT&CK-driven correlation, and analyst-led investigation. The project documents a read-only default and configurable integrations.
YARA Scan Judol Defensive YARA rules aimed at online-gambling content, PHP backdoors, Black SEO injection, WordPress compromise patterns, and malicious JavaScript injection.
YARA Check Homoglyph Detection work targeting homoglyph and Unicode-confusable tricks used to disguise text and evade straightforward matching. Review the repository for its current rule and tool coverage.
hashbd A malware-hash reference repository based on an upstream project. Check attribution, provenance, freshness, and licensing before relying on any indicator operationally.

03 / SOC WORKFLOW MAP

ANALYST-IN-THE-LOOP · CONTEXT BEFORE CONCLUSION 

flowchart LR
    A[Security Telemetry] --> B[SIEM & Event Search]
    B --> C[Threat Intelligence]
    C --> D[Correlation & Enrichment]
    D --> E[Investigation Context]
    E --> F[Analyst Review]

    classDef source fill:#10233F,stroke:#3B82F6,color:#EAF4FF,stroke-width:1px;
    classDef process fill:#0B3444,stroke:#22D3EE,color:#E6FCFF,stroke-width:1px;
    classDef analyst fill:#30264D,stroke:#A78BFA,color:#F5F3FF,stroke-width:1px;
    class A,B source;
    class C,D,E process;
    class F analyst;
Loading

Conceptual workflow only. Integrations, available data, and results depend on deployment configuration and source availability.

04 / TECHNOLOGY RADAR

Python Wazuh Model Context Protocol OpenSearch
MITRE ATT&CK YARA Sigma Threat intelligence LLM and RAG LangGraph

05 / ENGINEERING PRINCIPLES

◈ Evidence over assumptions
Alerts, enrichment, and AI-generated analysis are leads to verify, not proof by themselves.		 ◈ Defensive by design
Prioritize monitoring, detection, investigation, and safe operational practices.
◈ Interoperability first
Connect reusable tools with the platforms analysts already work in.		 ◈ Responsible sharing
Respect data privacy, licensing, source attribution, and operational context.

06 / CRYPTOGRAPHIC IDENTITY

OPENPGP · PUBLIC-KEY CRYPTOGRAPHY · VERIFY BEFORE TRUST

◈ Public key identity

User ID
csirt Tangerangkota <csirt@tangerangkota.go.id>

Algorithm
RSA 4096-bit

Created
12 March 2026

◈ Fingerprint

D4C6 2039 9515 AD79 1524 48A5 4353 32C4 7AE1 5707

Key ID
0x435332C47AE15707

Use
Signing / certification, with an encryption subkey

Look up PGP public key on keys.openpgp.org

Keyserver lookup by full fingerprint: keys.openpgp.org

Open the complete ASCII-armored PGP public key

Save the contents below as INFOKOM-KI-Public-Key.asc, or download the key from the keyserver link above. Verify the fingerprint independently before relying on this key.

-----BEGIN PGP PUBLIC KEY BLOCK-----

xsFNBGmygEABEADowPVTj2vY9Vu+IiL0s/AAvOdvsyOeM3Q1GMjqltm2+2QwDmp+
6SdssspeqXUqb/A6OrR2fQPSoTD5Vv8G07TvAJTd/d5cr0pxHF3ckJ9KXYkQZ4Fg
0lgT8qSRYLKEs0GgI3q/NxA9KeSg8ZG4PP5CaiEiw4DELnmIs5lxabHtFj4ejwyD
n0KE1Vi6gwGkPAEXqUoyg/CM3vsaEMaVhUsQWfN+Cyg0MCjmUmVXuNuCcm7XkT92
FFhnWXWATaPBam2UyqcIBw0tlMr5x5XDhzyZSS4UetJaX9rZwAMwnIrkBVZyRARy
EfbM/x/uq5lFvAlsRwrvkMWhIdo6gQH3nddqomPLuA4ILqEtOJH9UZ3XK1Aex6a1
s1R644VgZ8zDXIq5rAVO18x7/+xMw86KAU0o2tlHPg6iwticL6xSGQH0IOEBvHXo
6X6SN0+OktUyY1cSHPwYaKjZdHpIasBf1VsVkfxZ4ugN3BNM8q/YZ/ASO9KXVqQE
d28jsHnBQ3Hl4/6NAsail0P5DnFY8gCz/CbYJGCiEEwPwxEArv7uPyOIrVEWNePJ
BxYlxXtDs1oAwMAnoQNS8AukqpEDyYf5TCbjGKeB0pUffs/ywtaCB8rcCDLIQ9EF
sIahPySiiaCJwxTbMgi0Np3/0VYruH0/bInnjc7m/z7VIITFxrkaQEfwYQARAQAB
zS9jc2lydCBUYW5nZXJhbmdrb3RhIDxjc2lydEB0YW5nZXJhbmdrb3RhLmdvLmlk
PsLBhwQTAQgAMRYhBNTGIDmVFa15FSRIpUNTMsR64VcHBQJpsoBBAhsDBAsJCAcF
FQgJCgsFFgIDAQAACgkQQ1MyxHrhVwfOXxAAuPAvnT/Azm4nwKcy6qlMDJnrLa7k
c1z5fPHMdw5Ik9Pldep0Arba8C32H+4bmU7on7zMdcHJKmAt1YQyZe6dt57vbxVs
rNwDN/9Aksjg2iq/FA4v9Bn75mHk+/h0HtOrNDWwjN/c8TwjmSIi6hOMfr67deUB
9TXaNw81XLONvHzEh5JmpzUgOvY+R47YQMSuxqJQoN9Gmp8P0FARyDkVio2/OJCl
Jk64OmtwEt7eGxmwGTjZQEF+zXPj8p1EmZEUt59GFjlgmyWLx1kp+ahf+fdMIljq
/B/ntzU9Xr0TPrmnSwnkKtxtqIZgs5acOGhqrcdEDNb2FNHOuIR/BsXzfMYjEv5z
qmaQBKM6Aa+6OMwZAnZcVQzyzxIEytNOdw/yiSNxYOkSI5XDKhDF7MHzEgV/orVZ
5iKQ5jOA4eZcqvC2Gls3dGr2ol9PLf9uC+LDCIeCk8OHhNToqj5HjNSOHV60EnCZ
C8zYOGFrX4Hctkp24J6rg3YlDbdyNF95nTUNngp1SaAAnwbqXDGhkm/PKUc4cAzY
UhwFllUlW0BNCFCSrd4VblQUyamhoOqrRo7s1y6+T2G79aEPjAxMB9p+T1rLT0vL
pPYCeAksauFG8gXCi9l79c44leL3d/VlXwHZ5PNNcF9LaGt4keWxdspprEEASox2
eQ2D1swvSgdwPc/OwU0EabKAQgEQALue8JqxYdLH/AeDh/4FyrOlQVAmyDgRG3/9
+YrpThwaa4nnwh6IlCFTdOX4VZzeTfa0L1FWm5MCdZU/YiHFf39kOQM80bnaGXx6
/kovTnJB/ygcZF/k6uJWELZy3ghFn5sY2ANXBfuuunIscQAycupfTbEGXQ4itYtd
vvZFh30ZdtWOuACgLDV7TjnOtkg6Oyt4JmPXUDAabGMrfTupNcWbPDRbI4ZTi3g9
/UOGI8tzEWdKdKBcCDvzIuVm1VfsXfwCHl318rThetrGe9Z7oviybM9pujbKx/s7
fil1XHvfb0Tv+abffI01ivyD3rlKys/Bxzl6cuA1tLgAevbdrui+LkWNKHC/8KOm
XSyLsG5oz/B4X2XotA0Va9NoGwQHD947yyPfliB1zgavwMbZK61jaDNV7+3V/+FD
zjjYvmfRyjfw6C6Huq3wmjMK1XW3laVC0OD6S6b7z1W+xH4W4/eIZ5YXgm1QqWK1
LGnRh7VgwhQkjzO2HcHHkVFp0FRXfba5rOJIYxTXrZvaXs6tPbpgtjiKD25jNd4x
Ey1GEywNA3+X/kfg9hRRGXnjApP8qFN82L/6EEm0lJOOBMZpHalA6f4EvDI1v569
svDg/4tYAHmzBYDwkRK1pAM5H27L6pzdnhWRAI5+TJ7vNAj3a68FW+Zmm2Z+skLL
SBdosx+VABEBAAHCwXYEGAEIACAWIQTUxiA5lRWteRUkSKVDUzLEeuFXBwUCabKA
QwIbDAAKCRBDUzLEeuFXBxuHEADl9ah8OKvwR0D/wwAMvqzRYVMK2t1MxJkdyBgf
fdHMVcXA/j7Qi8VtFKQot6sLqHgnvHjhcO/Qd1a8FhNxfib2bgJcaJ+ZO2SV7Xd0
IpydtHgQTEz5h8n1lm/odmk0lc88bI/xtc8Ho/rQwCPnm5yr1dFHHr6tyqhwduhM
uWVwPTe4TY2i0KFiw/JVSi1ccIUPnRGaJRFevDOCHQa5aIZzKM/v8n4RKzvrml+q
qX+CEJ9UYB3HdITNuvYJnUmGR/XBfuNotdIbYp5sUCELSwLMeI33aFDyd+27RNYY
z5fI4nkHbubK0acyS20DxwxrqBZgZM67nuODfP1E0gO6/DGaPiltEsFdls1fe1PS
3iNs48OJ0yk0ryQ6cc8UrIifSM9Pzi9MYdu+/zMfxuIhmgvmXc+BlGYScYrUMSNM
atyIeiJw57jBEk53FwmojFAAVJLyJCMyS6ACPI4vzlxDNXSPsJWXmm7Vee/ZRu7n
mKe+Ao1mtv51OxZQlVgZ8LZShJR2+xnUVAPGUz24bTmu988P85Pna+ac/L51DASC
/6xAoCny42K/wDOkJXhDaJJsMTAGjkYiok0IXWS4pEPS3mR/iSNEkCRRRkacuUvK
+9QZQY1+qZLiQhzzMeKoKMfvFRx298mWIjElELtuRAnXumJQb9wAL4cdAH3illBL
3Jcnug==
=dWIj
-----END PGP PUBLIC KEY BLOCK-----
How to inspect the key with GnuPG 
gpg --show-keys --with-fingerprint INFOKOM-KI-Public-Key.asc

To import it into your local public keyring:

gpg --import INFOKOM-KI-Public-Key.asc

07 / REPOSITORY TELEMETRY

Wazuh MCP stars YARA scan stars Homoglyph stars

BUILD · DETECT · INVESTIGATE · IMPROVE

Share intelligence. Detect earlier. Investigate deeper. Defend collectively.

View all INFOKOM-KI projects TangerangKota-CSIRT website

© INFOKOM-KI · Keamanan Informasi & Persandian · Defensive cybersecurity and open-source engineering

Pinned Loading

  1. Wazuh-MCP-Server Wazuh-MCP-Server Public

    Wazuh MCP Server: AI-Driven SOC Automation

    Python 92 25

  2. hashbd hashbd Public

    Forked from didikw/hashbd

    hash database from https://github.com/CYB3RMX/MalwareHashDB/blob/main/HashDB

    PHP 3 1

  3. yara-scan-judol yara-scan-judol Public

    Kumpulan Yara rules untuk mendeteksi konten judi online (judol), backdoor judol, dan teknik Black SEO yang menarget website di Indonesia.

    YARA 2

  4. yara_check_homoglyph yara_check_homoglyph Public

    Detect homoglyph / Unicode-confusable attacks in online gambling SEO spam (JuD0L).

    YARA