DNSentinel

Intelligent DNS Filtering with Threat Intelligence, ML-Based DGA Detection & DNS Tunneling Analysis

Developed by Mohd Saad Khan — Full-Stack Developer

**DNSentinel is an AI-powered DNS security and threat-detection platform developed for SIH1524. It acts as a secure DNS resolver that analyzes DNS requests using threat intelligence, ML-based DGA detection, and behavioral DNS-tunneling analysis before deciding whether to allow, flag, or block them. It also supports PCAP/Zeek-based forensic analysis and provides a SOC-style dashboard for real-time monitoring and investigation.**

Technologies Used

Python, FastAPI, React, TypeScript, TensorFlow/Keras, Scikit-learn, Redis, SQLite, AsyncIO, STIX/TAXII, PCAP, Zeek, DNS, DoH, DTLS, Ollama, Tailwind CSS