This repository will describe the details surrounding the SIEM (wazuh) mini project, which will cover all aspects of topology design, deployment, rules, integration, and fine tune.

SIEM lab using Splunk for log ingestion and alerting.

Building one Solution for Threat management and detection for you network with Open source SOC solution.

This repository contains DEVO SIEM use cases covering multiple security domains and technologies. Each use case is designed to detect specific threats, suspicious activities, or policy violations with detailed response playbooks and MITRE ATT&CK mappings.

An Open-source Security Information and Event Management (SIEM) solution blended with UEBA and TI Capabilities

All About Me.

This project demonstrates the deployment of an ELK Stack security monitoring environment on Windows with centralized log collection and endpoint monitoring.

This project simulates a real-world SOC (Security Operations Center) environment built entirely on a home lab. Using Splunk Enterprise as the SIEM, Sysmon for deep Windows telemetry, and Kali Linux as the attacker machine,

Final project of my university

Enterprise-style Wazuh SIEM capstone lab built on Ubuntu and ESXi for centralized Windows endpoint monitoring, threat detection, CIS benchmarking, and vulnerability management.

Automatically downloads, parses, and synchronizes Sigma rules into various SIEM formats.

Advanced CyberSecurity Defence System (ACDS)

Open-source Linux endpoint security agent built with Go and eBPF for real-time kernel event monitoring, log streaming, and centralized security visibility.

High-performance Go-based SIEM server featuring gRPC log ingestion, Elasticsearch Data Streams, NATS JetStream, rule-based alerting, Kibana dashboards, and secure C2.