🚀 Path Predict: Multi-Cloud Attack Path Prediction Platform

🎯 Why Path Predict?

📊 Key Metrics & Results

🏗️ Architecture Overview

✨ Core Features

🔮 Attack Path Prediction

⚡ Real-Time Detection

🛡️ Prevention & Remediation

🔒 Enterprise Security

🚀 Performance & Scale

🚀 Quick Start (5 Minutes)

Prerequisites

One-Command Deployment

# Clone repository
git clone https://github.com/prompt-general/path-predict.git
cd path-predict
# Generate configuration and deploy
chmod +x deployment/deploy-full.sh
export SECRET_KEY="your-secure-secret-key"
./deployment/deploy-full.sh

Verify Installation

# Check service health
curl http://localhost:8000/health
# Test attack path detection
python -m cli.main paths detect
# Explore Neo4j browser
open http://localhost:7474 # neo4j/pathpredict123
# View Grafana dashboard
open http://localhost:3000 # admin/admin123

📁 Project Structure

path-predict/
├── ingestion/ # Cloud provider integrations
│ ├── aws/ # AWS IAM, EC2, S3, CloudTrail
│ ├── azure/ # Azure AD, ARM, Monitor
│ └── gcp/ # GCP IAM, Compute, Cloud Audit
├── graph/ # Neo4j graph operations
│ ├── schema.py # Unified graph schema
│ ├── writer.py # Time-versioned writes
│ └── connection.py # Neo4j connection manager
├── attack_paths/ # Attack path detection
│ ├── traversal.py # Cypher query templates
│ ├── scoring.py # Risk scoring algorithms
│ └── cached_traversal.py # Redis-cached traversal
├── prediction/ # ML prediction engine
│ ├── gnn_predictor.py # Graph Neural Networks
│ ├── engine.py # Heuristic predictions
│ └── feature_engineer.py # ML feature engineering
├── events/ # Real-time event processing
│ ├── collectors/ # Event collection
│ ├── processors/ # Event enrichment
│ └── attack_matching/ # MITRE ATT&CK correlation
├── api/ # API layer
│ ├── graphql/ # GraphQL schema & resolvers
│ ├── rest/ # REST endpoints
│ ├── realtime.py # WebSocket streaming
│ └── auth.py # Authentication middleware
├── alerts/ # Alerting system
│ ├── manager.py # Multi-channel alert manager
│ ├── channels/ # Slack, Teams, Email, Webhook
│ └── templates/ # Alert templates
├── integrations/ # SIEM integrations
│ ├── splunk.py # Splunk HEC integration
│ ├── sentinel.py # Azure Sentinel integration
│ └── terraform.py # Terraform plan analysis
├── auth/ # RBAC system
│ ├── rbac.py # Role-based access control
│ ├── middleware.py # FastAPI RBAC middleware
│ └── models.py # User/role models
├── compliance/ # Compliance framework
│ ├── framework.py # PCI-DSS, HIPAA, SOC2 checks
│ ├── controls/ # Compliance control definitions
│ └── reports/ # Compliance reporting
├── cache/ # Caching layer
│ ├── manager.py # Redis cache manager
│ └── decorators.py # Cache decorators
├── cli/ # Command-line interface
│ ├── main.py # Main CLI entry point
│ ├── paths.py # Attack path commands
│ └── realtime.py # Real-time monitoring commands
├── deployment/ # Deployment configurations
│ ├── docker/ # Dockerfiles
│ ├── helm/ # Kubernetes Helm charts
│ ├── terraform/ # Infrastructure as Code
│ └── nginx/ # Reverse proxy configuration
├── monitoring/ # Monitoring stack
│ ├── prometheus/ # Prometheus configuration
│ ├── grafana/ # Grafana dashboards
│ └── metrics.py # Custom metrics
└── tests/ # Test suite
 ├── unit/ # Unit tests
 ├── integration/ # Integration tests
 └── performance/ # Performance tests

🎮 Usage Examples

1. CLI Operations

# Initialize database
python -m cli.main init
# Ingest AWS resources
python -m cli.main ingest-aws --profile production
# Detect attack paths
python -m cli.main paths detect --type privilege --min-score 70
# Monitor real-time events
python -m cli.main realtime dashboard
# Analyze Terraform plans
python -m cli.main realtime analyze --plan-file terraform.plan.json
# Run compliance checks
python -m cli.main compliance check --standard pci_dss

2. API Usage

import requests
# Get JWT token
auth_response = requests.post(
 "http://localhost:8000/api/v1/auth/login",
 json={"username": "admin", "password": "admin123"}
)
token = auth_response.json()["access_token"]
# Query attack paths via GraphQL
query = """
{
 attackPaths(limit: 5, severity: CRITICAL) {
 pathId
 source
 target
 riskScore
 mitreTechniques
 }
}
"""
response = requests.post(
 "http://localhost:8000/graphql",
 json={"query": query},
 headers={"Authorization": f"Bearer {token}"}
)
# Stream real-time events via WebSocket
import websocket
ws = websocket.WebSocket()
ws.connect("ws://localhost:8000/api/v1/realtime/events")

3. Terraform Integration

# In your CI/CD pipeline
resource "null_resource" "security_scan" {
 provisioner "local-exec" {
 command = <<EOF
 terraform show -json > plan.json
 curl -X POST http://path-predict.internal/api/v1/terraform/analyze \
 -H "Authorization: Bearer $TOKEN" \
 -H "Content-Type: application/json" \
 -d @plan.json
 EOF
 }
 
 triggers = {
 always_run = timestamp()
 }
}

🔌 Integrations

SIEM Integrations

Alerting Channels

Cloud Providers

Infrastructure as Code

📊 Monitoring & Observability

Built-in Dashboards

Metrics Collected

🔒 Security & Compliance

Security Controls

Compliance Frameworks

🚀 Performance & Scaling

Benchmarks

Scaling Strategies

🧪 Testing & Quality

Test Coverage

CI/CD Pipeline

# Example GitHub Actions workflow
name: Path Predict CI/CD
on: [push, pull_request]
jobs:
 test:
 runs-on: ubuntu-latest
 steps:
 - uses: actions/checkout@v3
 - name: Run Tests
 run: |
 docker-compose -f docker-compose.test.yml up -d
 pytest --cov=./ --cov-report=xml
 - name: Security Scan
 run: |
 trivy fs --severity HIGH,CRITICAL .
 snyk test --all-projects

📚 Documentation

Quick Links

Learning Resources

🤝 Contributing

Development Setup

# Clone and setup
git clone https://github.com/prompt-general/path-predict.git
cd path-predict
# Create virtual environment
python -m venv venv
source venv/bin/activate # On Windows: venv\Scripts\activate
# Install dependencies
pip install -r requirements-dev.txt
# Start development environment
docker-compose -f docker-compose.dev.yml up -d
# Run tests
pytest tests/ -v

📄 License

Third-Party Licenses

🌟 Success Stories

Case Study: FinTech Company

Case Study: Healthcare Provider

🆘 Support & Community

Getting Help

Commercial Support

📈 Roadmap

Q2 2026

Q3 2026

Q4 2026

🙏 Acknowledgments

Built with ❤️ by security engineers, for security engineers.

Star History Chart