ABOUT THE PROJECT
PhilSIEM documents a practical transition into cybersecurity, with an emphasis on defensive operations, careful investigations and evidence that can be explained.
A personal Ubuntu-based OpenCanary environment, decoy service experiments, logging and Telegram notification workflows. Individual capabilities should be judged by their documented evidence rather than assumed to be production-ready.
OpenCanary case study →The PhilSIEM v2 architecture diagram describes a future segmented network and centralised monitoring environment using proposed tools including Security Onion, Suricata, Zeek, Cowrie and Elastic.
Architecture study →Alert triage, evidence collection, escalation decisions and case reporting.
Protocols, traffic inspection, service exposure and monitoring boundaries.
Linux labs, defensive tooling and ongoing Security+ study. No certification is claimed unless independently confirmed.
Project status is always stated. Fictional case studies are labelled as simulations. Sensitive IPs, credentials, bot tokens and private logs stay out of public pages. Future screenshots will be reviewed before publication.