Simulation of phishing attacks using Generative AI Centralized log collection with Logstash and detection via Elastic SIEM End-to-end SOAR automation using Shuffle, DFIR-IRIS, and Slack AI-based phishing detection with a fine-tuned BERT model Benchmarking against Naïve Bayes, XGBoost, CNN-LSTM, and standard BERT Deployment of the best-performing model using FastAPI, hosted on Hugging Face Real-time decision-making by integrating AI detection into the SOAR pipeline