Implementation of SOC using SIEM

Abstract

The project titled “Implementation of SOC using SIEM Tools” aims to design and deploy a fully functional Security Operations Centre leveraging open-source or commercial SIEM solutions. This SOC will integrate log collection, normalization, correlation, alerting, and incident response workflows. Building on the success of the malware analysis sandbox, this project focuses on broader organizational security by correlating diverse security data sources in real-time, developing actionable detection rules, and establishing robust incident response procedures. The outcome will be a comprehensive SOC environment capable of monitoring, detecting, and responding to threats, thereby minimizing risk and enhancing cybersecurity resilience.