Skip to main content

BrainPredict Cyber: Getting Started

Connect your SIEM and get real-time AI threat scoring in under 15 minutes.

Prerequisites

  • Active BrainPredict Cyber subscription and API key
  • SIEM system (Microsoft Sentinel, Splunk, QRadar, or compatible)
  • Read access to security event logs
  • Network connectivity between BrainPredict Cyber and your SIEM API

Step 1: Get Your API Key

Sign in to the BrainPredict portal and navigate to Cyber → Settings → API Keys:

bp_cyber_live_1234567890abcdef1234567890abcdef

Step 2: Install the SDK

pip install brainpredict-cyber

# or Node.js
npm install @brainpredict/cyber-sdk

Step 3: Connect Your SIEM

from brainpredict_cyber import CyberClient

client = CyberClient(api_key='YOUR_API_KEY', tenant_id='your-org')

client.connect_siem(
    siem_type='sentinel',
    workspace_id='your-sentinel-workspace-id',
    client_id='your-app-client-id',
    client_secret='your-app-secret'
)
print("<svg className="w-4 h-4 inline-block align-text-bottom flex-shrink-0" viewBox="0 0 24 24" fill="none" stroke="currentColor" strokeWidth="2.5" strokeLinecap="round" strokeLinejoin="round"><polyline points="20 6 9 17 4 12"/></svg> Microsoft Sentinel connected")

Step 4: Score Your First Threat

result = client.score_threat({
    'source_ip': '185.220.101.47',
    'destination_ip': '10.0.1.22',
    'event_type': 'lateral_movement',
    'user': 'svc-backup',
    'timestamp': '2026-03-10T14:22:00Z'
})

print(f"Threat Score: {result['threat_score']}/100")
print(f"Severity: {result['severity']}")
print(f"MITRE ATT&CK: {result['mitre_technique']}")
print(f"Recommended Action: {result['recommended_action']}")

# Threat Score: 94/100
# Severity: CRITICAL
# MITRE ATT&CK: T1021 — Remote Services
# Recommended Action: Isolate host 10.0.1.22 immediately