This project demonstrates the design and implementation of a Security Information and Event Management (SIEM) dashboard using the ELK Stack (Elasticsearch and Kibana).
The solution was developed to monitor and visualize critical security events including:
- Brute Force Attacks
- Privilege Escalation Attempts
- Data Exfiltration Activities
Security events were ingested into Elasticsearch, analyzed using custom Elastic Security detection rules, and visualized through an interactive Kibana dashboard.
- Elasticsearch
- Kibana
- Elastic Security
- Docker
- ELK Stack
Created and indexed simulated security events representing multiple attack scenarios.
Developed custom detection rules for:
- Brute Force Detection
- Privilege Escalation Detection
- Data Exfiltration Detection
Validated rule execution through Elastic Security alerts and event monitoring.
Created visualizations including:
- Total Security Events
- Severity Metrics
- Attack Type Distribution
- Severity Distribution
- Source IP Analysis
- Recent Security Events Monitoring Table
Verified successful event ingestion, alert generation, dashboard functionality, and visualization accuracy.
Security Events → Elasticsearch → Detection Rules → Alerts → Kibana Dashboard
- SIEM Engineering
- Detection Engineering
- Security Monitoring
- SOC Operations
- Elasticsearch
- Kibana
- Alert Management
- Dashboard Development
- Incident Detection
Atharva Vilas Shitole Cybersecurity Analyst