🧠 SIEM & Log Monitoring Project

A practical cybersecurity project focused on log collection, attack detection, and incident response using Splunk/ELK Stack.

🎯 Objective

Build a SIEM lab to collect, analyze, and visualize logs from Windows systems to detect malicious activity.

🧩 Tools Used

• Splunk / ELK Stack
• Windows Event Viewer
• Sysmon
• PowerShell
• Kali Linux (for attack simulation)

🏗️ Project Phases

1. Setup & Configuration
2. Log Collection & Ingestion
3. Threat Simulation
4. Detection & Response
5. Reporting & Documentation

📊 Expected Output

• Interactive dashboard (attack timeline)
• Alerts for brute-force and PowerShell misuse
• Incident report PDF (with recommendations)

📁 Author

Gufran Ahmed
Cybersecurity & Network Engineering | Penetration Tester
📍 London, UK
🔗 LinkedIn: linkedin.com/in/gufran-uh
💻 GitHub: github.com/cyb-gufran