Research SOC testbed for alert correlation and noise reduction. Zeek + Wazuh + Elastic. Includes generated attack telemetry, detections, metrics, and reproducible experiments
-
Updated
May 24, 2026 - Shell
Research SOC testbed for alert correlation and noise reduction. Zeek + Wazuh + Elastic. Includes generated attack telemetry, detections, metrics, and reproducible experiments
Lightweight SOC and SIEM simulation built with Bash for Linux and Termux, featuring log monitoring, event correlation, threat detection, incident response workflows, and security operations automation.
Add a description, image, and links to the security-analytics topic page so that developers can more easily learn about it.
To associate your repository with the security-analytics topic, visit your repo's landing page and select "manage topics."