nSIEM · Dev diary

Build lognSIEM.

Logs collected from your machines into one store you host yourself — shown working, one entry at a time.

What gets posted here

New pieces as they land — collection, search, and later detection — each shown against real data from the lab, with the result as it came out.

Tests run in a disposable virtual-machine lab, so the machine names, users and identifiers visible in the screenshots belong to that lab and nothing else.

Entries

  1. Kernel Driver Load Detection

    A harmless test driver on a lab machine: Windows refuses it, then loads it in test mode, and nSIEM records both.

    Read entry →
  2. First look: real logs, searchable in milliseconds

    The nSIEM agent on a lab machine shipping its first Windows logs into the console — and what searching them looks like.

    Read entry →
← Back to Cybermitai