Apppublic

STARBOY-6859/develop-and-test-custom-correlation-rule-e8gw8v8m2qo

sourceHugging Faceupdated 10mo agoView on Hugging Face

0likes

App README

markdown

# SIEM Sleuthhound - Security Monitoring Tool

## Getting Started

### Prerequisites
- Node.js (v14 or higher)
- npm (comes with Node.js)
- Modern web browser (Chrome, Firefox, Edge)

### Installation
1. Clone the repository:

git clone https://github.com/your-repo/siem-sleuthhound.git cd siem-sleuthhound


2. Install dependencies:

npm install


### Running the Application
1. Start the development server:

npm start


2. Open your browser and navigate to:

http://localhost:3000


## Testing Features

### Available Test Pages
1. **Rule Testing Environment** (`/testing.html`)
   - Test individual SIEM detection rules
   - Includes tests for:
     - Credential Stuffing
     - DNS Tunneling  
     - PowerShell Exploitation

2. **Attack Detection Rules** (`/attack-detection.html`)
   - View all detection rules with mitigation steps
   - Test all rules at once using the "Test Rules" button
   - Generate comprehensive test reports

### Running Tests
1. **Individual Rule Tests**:
   - Navigate to `/testing.html`
   - Click the "Run Test" button for each rule type
   - View results in the test log panel

2. **Comprehensive Testing**:
   - Navigate to `/attack-detection.html`
   - Click the "Test Rules" button to run all tests
   - Click "Generate Test Report" to create a detailed report

3. **Automated Testing**:

npm test

   - Runs all test suites
   - Generates coverage report in `coverage/` folder

## Development

### Project Structure

siem-sleuthhound/ ├── components/ # Web Components ├── css/ # Stylesheets ├── js/ # JavaScript files ├── attack-detection.html # Detection rules page ├── testing.html # Testing environment ├── index.html # Main dashboard └── README.md # This file


### Building for Production

npm run build

- Optimizes assets for production
- Outputs to `dist/` folder

## License
MIT License - See [LICENSE](LICENSE) for details