DEVELOPMENT OF AN INDIGENOUS SECURITY INFORMATION AND EVENT MANAGEMENT (SIEM) SOLUTION BASED ON OPEN-SOURCE FRAMEWORK
Non- availability of an indigenous SIEM solution developed based on open-source framework for monitoring the endpoints which are not connected to Naval Unified Domain (NUD)
Development of an indigenous SIEM solution based on open-source framework primarily compatible with Windows and NasvIOS endpoints.
The solution, in addition to the core feature facilitating endpoint monitoring, should comprise multiple modules such as a built-in Network Monitoring System, Threat intelligence, Forensic Analysis, Behavioural Analysis etc.
