Skip to content
This repository has been archived by the owner on Dec 13, 2021. It is now read-only.
Jack Whitter-Jones edited this page Jan 24, 2021 · 2 revisions

Welcome to the SIEMEz wiki!

SIEMEz is a truly free security solution that allows anyone the ability to deploy their own Security Incident and Event Management System. SIEMEz allows for the ingestion of Syslog content which can then be searched and analysed. The aim of the project is to allow for easy integration of DevOps, machine learning and advanced automation.

Motivation

While there are several SIEM solutions available, many require enterprise licensing to utilise effectively. The annoyance of enterprise licensing for user management, or even dashboarding and the lack of further integration of other areas of computing has led to the creation of this project. Security for hobbyists, small- medium, and large businesses should not be held ransom to enterprising licensing.

Code style

This project follows the standard styling of PEP8

Framework

The core of SIEMEz is the Django framework, with its maturity in the web development world, coupled with the flexibility of Python, allows anyone to extend SIEMEz. In addition, the pipenv virtual environment is used along with Docker for the ability to deploy quickly, seamlessly, and efficiently.

Overall, the project utilises five main components:

  • Django Web and Rest Framework
  • Pipenv
  • Docker
  • Python
  • Rsyslog

Features

SIEMEz allows for the quick deployment and integration of log files to allow for quick security analysis but also extending to the easy integration of machine learning models.

License

This project is to be flexible and easy to integrate but allowing others to use and adapt to their needs. While this is the case, any changes to the project should be open and discussed to better the security community.

Contribution

To help with SIEMEz contact me at: contribute@siemez.io or Twitter

Clone this wiki locally