ODIN — Passive Network Threat Detection

Real-time threat detection for one-way-mirrored network traffic, built for Smart India Hackathon.

• Python
• Zeek
• Kafka
• Flask
• React
• Docker

A threat-detection system for one-way mirrored network traffic: Zeek parses raw packets into structured logs, Kafka streams them to six threat detectors covering DDoS, C2 beaconing, DGA/DNS tunnelling, TLS-wrapped malware, reconnaissance, and data exfiltration, a correlation engine aggregates findings, and a Flask API streams results live via SSE to a React dashboard — all running on Docker Compose. Raised pipeline throughput 4.74× by micro-batching inference, and diagnosed a Zeek log join bug that had silently disabled TLS detection.