Function ai_correlate

cli/main.py:783–827

Correlate findings and identify attack chains.

(
    target: str = typer.Argument(..., help="Target to analyze"),
)

        copilot = SecurityCopilot(provider=provider, model=model, base_url=base_url)
        copilot.load_scan_results(results)

        summary = run_async(copilot.get_executive_summary())
        console.print()
        console.print(Panel(summary, title="[bold blue]Executive Summary[/bold blue]", border_style="blue"))

    except Exception as e:
        console.print(f"[red]Error: {e}[/red]")
        if "ollama" in provider.lower():
            console.print("[dim]Make sure Ollama is running: ollama serve[/dim]")


@ai_app.command("correlate")
def ai_correlate(
    target: str = typer.Argument(..., help="Target to analyze"),
):
    """Correlate findings and identify attack chains."""
    setup_logging()

    console.print(f"[bold]Finding Correlation:[/bold] {target}")

    results = _collect_scan_results(target, ["dns", "headers", "tech", "ssl", "ports", "dirs"])

    from modules.ai import FindingCorrelator

    correlator = FindingCorrelator()
    report = correlator.correlate(results)

    # Display risk summary
    risk = report.risk_summary
    risk_colors = {"CRITICAL": "red", "HIGH": "red", "MEDIUM": "yellow", "LOW": "blue", "MINIMAL": "green"}
    risk_color = risk_colors.get(risk.get("risk_level", ""), "white")

    console.print()
    console.print(Panel(
        f"[{risk_color}]Risk Score: {risk.get('overall_score', 0)}/100\n"
        f"Risk Level: {risk.get('risk_level', 'Unknown')}[/{risk_color}]\n\n"
        f"Total Findings: {report.total_findings}\n"
        f"Unique Findings: {report.unique_findings}\n"
        f"High Priority: {risk.get('high_priority_findings', 0)}\n"
        f"Attack Chains: {risk.get('attack_chains_identified', 0)}",
        title="[bold]Risk Summary[/bold]"
    ))

    # Display attack chains
    if report.attack_chains:
        console.print()
        console.print("[bold red]Attack Chains Identified:[/bold red]")
        for chain in report.attack_chains: