siem-development

This repository will describe the details surrounding the SIEM (wazuh) mini project, which will cover all aspects of topology design, deployment, rules, integration, and fine tune.

Microsoft Sentinel SIEM Log Source Analyzer

SIEM lab using Splunk for log ingestion and alerting.

Building one Solution for Threat management and detection for you network with Open source SOC solution.

This repository contains DEVO SIEM use cases covering multiple security domains and technologies. Each use case is designed to detect specific threats, suspicious activities, or policy violations with detailed response playbooks and MITRE ATT&CK mappings.

An Open-source Security Information and Event Management (SIEM) solution blended with UEBA and TI Capabilities

This project demonstrates the deployment of an ELK Stack security monitoring environment on Windows with centralized log collection and endpoint monitoring.

All About Me.

This project simulates a real-world SOC (Security Operations Center) environment built entirely on a home lab. Using Splunk Enterprise as the SIEM, Sysmon for deep Windows telemetry, and Kali Linux as the attacker machine,

Automatically downloads, parses, and synchronizes Sigma rules into various SIEM formats.

Enterprise-style Wazuh SIEM capstone lab built on Ubuntu and ESXi for centralized Windows endpoint monitoring, threat detection, CIS benchmarking, and vulnerability management.

Final project of my university

Advanced CyberSecurity Defence System (ACDS)

Open-source Linux endpoint security agent built with Go and eBPF for real-time kernel event monitoring, log streaming, and centralized security visibility.

High-performance Go-based SIEM server featuring gRPC log ingestion, Elasticsearch Data Streams, NATS JetStream, rule-based alerting, Kibana dashboards, and secure C2.