Final Submission for Ghaymah SecOps Assessment

docs/evidence-index.md

@@ -0,0 +1,19 @@
+# Evidence Index
+
+This document maps all screenshots, reports, and logs generated during the Ghaymah SecOps Assessment to their corresponding tasks and findings. Reviewers can use this index to verify the authenticity of all claims made in the documentation.
+
+| Evidence ID | File | Used In | Purpose |
+|------------|------|---------|---------|
+| **EV-001** | `task1-security-audit/ghaymah_audit.png` | Task 1 | Demonstrates successful execution of the Bash audit script and highlights missing security headers and exposed ports. |
+| **EV-002** | `task3-privacy-assessment/certificate.png` | Task 3 | Proves manual verification of the TLS certificate issuer and validity dates using browser DevTools. |
+| **EV-003** | `task3-privacy-assessment/cookies.png` | Task 3 | Identifies client-side storage mechanisms and tracking cookies set by the application. |
+| **EV-004** | `task3-privacy-assessment/network_headers.png` | Task 3 | Validates HTTP response headers, proving the absence of HSTS and CSP policies. |
+| **EV-005** | `task3-privacy-assessment/network-overview.png` | Task 3 | Shows a waterfall of network requests, highlighting third-party analytics scripts loading on the client. |
+| **EV-006** | `task3-privacy-assessment/security.png` | Task 3 | Highlights browser-level security warnings regarding mixed content or deprecated cipher suites. |
+| **EV-007** | `task4-siem/alerts.png` | Task 4 | Demonstrates the SIEM engine successfully parsing logs and generating actionable alerts. |
+| **EV-008** | `task4-siem/ips.png` | Task 4 | Shows the IP Reputation tracking mechanism identifying hostile actors across multiple requests. |
+| **EV-009** | `task4-siem/SIEM_UI.png` | Task 4 | Provides a full overview of the custom real-time SIEM dashboard interface. |
+| **EV-010** | `task4-siem/test_logs/sample_attack.log` | Task 4 | Contains the synthetic attack data used to test the SIEM parsing rules. |
+
+> [!TIP]
+> All screenshots are embedded with technical commentary in their respective task markdown files. Follow the links in the **Used In** column to view the contextual analysis.