Releases: sunilgentyala/gsh-framework
Releases · sunilgentyala/gsh-framework
GSH Framework v1.0.0-beta — Initial Public Release
Gentyala-Sovereign Hunt (GSH) Framework
Version: 1.0.0-beta
Author: Sunil Gentyala, Lead Cybersecurity and AI Security Consultant, HCLTech
What's Included
- Hunt-001: Agentic Loop / Resource Exhaustion detection playbook
- Hunt-002: DDI Covert Channel / C2 via DNS detection playbook
- Hunt-003: ML Model Poisoning / Behavioral Drift detection playbook
- Sovereign Sentinel enforcement engine (
scripts/gsh-sentinel-deploy.py) - DDI log parser with AI agent anomaly detection (
scripts/ddi-log-parser-ai.py) - Behavioral baseline probe evaluation engine (
scripts/gsh-probe-eval.py) - Standardized probe set: 20 probes across 8 categories (
probes/standardized-probe-set-v1.json) - Default Sentinel policy (
configs/sentinel-policy-default.yaml) - GSH Framework Whitepaper
Threat Coverage
| Threat Class | MITRE ATLAS | MITRE ATT&CK | NIST CSF 2.0 |
|---|---|---|---|
| Agentic Loop / Resource Exhaustion | AML.T0048, AML.T0040 | DE.AE-02, DE.CM-01, RS.MI-01 | |
| DDI Covert Channel / C2 via DNS | AML.T0048, AML.T0051 | T1071.004, T1048, T1568 | DE.CM-01, DE.AE-04, PR.DS-01 |
| ML Model Poisoning / Behavioral Drift | AML.T0020, AML.T0043, AML.T0044 | ID.RA-01, DE.AE-02, DE.CM-06 | |
| Rogue Agent / Unauthorized Tool Use | AML.T0053 | PR.PS-04, RS.AN-03 |