Abstract: The rapid expansion of digital technologies, cloud computing, and interconnected systems has significantly increased the complexity and frequency of cyber threats. Modern attacks such as ransomware, zero-day exploits, phishing campaigns, and advanced persistent threats (APTs) are becoming more sophisticated and difficult to detect using traditional security mechanisms. Conventional rule-based security tools are ineffective against evolving attack patterns and generate a high number of false positives [1].