The core intelligence engine of Aegis, an autonomous pipeline that chains OSINT enumeration, Nmap-based port and service discovery, and CVE database correlation to produce structured threat intelligence reports. Designed to run headless on target domains and deliver actionable findings in both machine-readable JSON and human-readable markdown formats.
- Role
- Security engineer
- Challenge
- Reconnaissance data arrives from separate tools and lacks a consistent evidence trail.
- Outcome
- Built the core intelligence pipeline used by Aegis for structured reconnaissance.
Decisions
- Chain enumeration, service discovery, and CVE correlation
- Preserve raw evidence beside normalized findings
- Export for humans and machines
Architecture
- Authorized target
- OSINT enumeration
- Nmap discovery
- CVE correlation
- JSON and Markdown reports
What changed my thinking
- Scope validation must happen before scanning
- Confidence and evidence should travel with every finding
PythonNmapFastAPIOSINTSQLite