jevbooks

← All projects

jev-incident-timeline

tsale/jev-incident-timeline · Homepage

Jev links confirmed malicious process to incident timeline.

Automated README summary

Automatically summarized from the README on 6 Oct 2026; not a run by jevbooks. Run instructions and author-reported outcomes still need verification.

What it is

A proof-of-concept tool for security analysts that starts from one confirmed-malicious process and uses Jev to link related events into a reviewable incident timeline. Available as a browser portal, local portal, and CLI.

How it uses Jev

For each other process start, Jev receives the seed process, analyst description, and candidate process details. It returns a probability that the candidate belongs to the same incident. Results above a threshold (default 0.8) are linked and shown in the timeline.

Primitives:choice

Technique worth stealing

Use Jev's relatedness scores to expand from a confirmed seed into a reviewable incident timeline.

Try it

Open the website or run `python3 web_app.py` after setting up keys.

View on GitHub

Start using Jev: API key and your first request →

Model judgments from README excerpts

Project signals use repository metadata, an existing summary and the first 700 README characters, not the full project. “Not found” means not detected in that material; it does not establish absence. These are the original judgments with recorded models and dates, not source audits or run results.

Models & evaluation dates

Inclusion gate
jev-1.13.0
Project signals
jev-1.13.0
Category
jev-1.13.0
Pattern tags
jev-1.13.0

Evidence

These signals use repository metadata, an existing summary and at most 700 cleaned README characters. ≥ 0.60 means reported in that excerpt; ≤ 0.40 means not found there. The middle band is inconclusive. None is a source-code audit or a test result. The runnable-tool question excludes research experiments; the recommendation question asks for a learning shortlist, not a quality verdict.

  • Jev is core to the projectFound in material0.91
  • Shows a System One patternunclear0.47
  • Describes handling uncertaintynot found in the excerpt0.04
  • Reports measured numbersnot found in the excerpt0.04
  • Is a runnable toolFound in material0.88
  • Top-10 learning shortlist signalunclear0.41
  • Is a replica of the modelnot found in the excerpt0.05
  • Solves a common problem (0–2)score on a 0–2 scale1.03 / 2
  • About JevFound in material0.98
Signals
Jev is core to the project0.91Shows a System One pattern0.47Describes handling uncertainty0.04Reports measured numbers0.04Is a runnable tool0.88Top-10 learning shortlist signal0.41Is a replica of the model0.0500.51Solves a common problem (0–2)1.03 / 2012

no-judgment band (0.40–0.60)

Design patterns
Funnel0.88Ghostwriter0.65Flight recorder0.57Fail open, fail closed0.54Inspection0.33Viewfinder0.2300.51

no-judgment band (0.40–0.60)

The Jev model and date for each judgment stage are listed above. Card written by DeepSeek V4.1 Flash from the README on 6 Oct 2026.