BS
Back to Projects
BlueGuard SOC Dashboard
Blue TeamIn the works
Most SIEM tooling is built for teams with a dedicated SOC budget. BlueGuard is an exploration of how far a lightweight, self-hosted alternative can go for smaller teams — real-time alert triage without the enterprise price tag.
The design centers on a WebSocket-driven live feed, basic correlation rules to reduce alert fatigue, and a triage queue UI so an analyst can work through incoming events without digging through raw logs.
Currently a working prototype on my own test environment — not yet packaged for outside use.
Highlights
- Real-time alert feed over WebSocket
- Basic correlation rules to cut down alert noise
- Triage queue UI designed for fast analyst workflows