# Blueshift: Your Frontier Blue team

- **Event:** [Intelligence at Work Hackathon](https://cerebralvalley.ai/e/intelligence-at-work-hackathon)
- **When:** Fri, Oct 23 at 8:30 AM – 8:00 PM (PDT)
- **Where:** Menlo Park, CA
- **Team:** [Ryan MacArthur](https://cerebralvalley.ai/u/tensor)
- **GitHub:** https://github.com/maceip/blueshift
- **Demo video:** https://youtu.be/7CxOZMEddS4
- **Gallery:** https://cerebralvalley.ai/e/intelligence-at-work-hackathon/hackathon/gallery
- **Page:** https://cerebralvalley.ai/e/intelligence-at-work-hackathon/hackathon/gallery/20

blueshift is your frontier blue team. a native desktop workbench for soc and appsec responders. today one alert takes four handoffs and six hours: siem triage, mitre lookup, browser
  repro, patch sign-off. blueshift does it in one place in 90 seconds. snowflake holds 1.84m+ real botsv3 + sysmon events and 1,388 mitre att&ck detections. guardrails strip injection
  hidden in attacker headers. system-1 scores the noise. three local litert-lm models run red, blue, green on-device. claude on cortex writes the call, with receipts. nothing ships until
  a human signs with touch id.

## More from Intelligence at Work Hackathon

- [Blast Radius](https://cerebralvalley.ai/e/intelligence-at-work-hackathon/hackathon/gallery/17)
- [Nova](https://cerebralvalley.ai/e/intelligence-at-work-hackathon/hackathon/gallery/18)
- [RecallOps](https://cerebralvalley.ai/e/intelligence-at-work-hackathon/hackathon/gallery/19)
- [Snow Trouble](https://cerebralvalley.ai/e/intelligence-at-work-hackathon/hackathon/gallery/21)
- [Vendor Finance](https://cerebralvalley.ai/e/intelligence-at-work-hackathon/hackathon/gallery/22)
- [Market Pilot](https://cerebralvalley.ai/e/intelligence-at-work-hackathon/hackathon/gallery/23)

---

Markdown version of https://cerebralvalley.ai/e/intelligence-at-work-hackathon/hackathon/gallery/20. Site index for agents: https://cerebralvalley.ai/llms.txt · full text: https://cerebralvalley.ai/llms-full.txt