ghaymah-exam-ZiadMahmoudAbdelgwad-SecOps/docs/evidence-index.md

Evidence Index

This document maps all screenshots, reports, and logs generated during the Ghaymah SecOps Assessment to their corresponding tasks and findings. Reviewers can use this index to verify the authenticity of all claims made in the documentation.

Evidence ID	File	Used In	Purpose
EV-001	task1-security-audit/ghaymah_audit.png	Task 1	Demonstrates successful execution of the Bash audit script and highlights missing security headers and exposed ports.
EV-002	task3-privacy-assessment/certificate.png	Task 3	Proves manual verification of the TLS certificate issuer and validity dates using browser DevTools.
EV-003	task3-privacy-assessment/cookies.png	Task 3	Identifies client-side storage mechanisms and tracking cookies set by the application.
EV-004	task3-privacy-assessment/network_headers.png	Task 3	Validates HTTP response headers, proving the absence of HSTS and CSP policies.
EV-005	task3-privacy-assessment/network-overview.png	Task 3	Shows a waterfall of network requests, highlighting third-party analytics scripts loading on the client.
EV-006	task3-privacy-assessment/security.png	Task 3	Highlights browser-level security warnings regarding mixed content or deprecated cipher suites.
EV-007	task4-siem/alerts.png	Task 4	Demonstrates the SIEM engine successfully parsing logs and generating actionable alerts.
EV-008	task4-siem/ips.png	Task 4	Shows the IP Reputation tracking mechanism identifying hostile actors across multiple requests.
EV-009	task4-siem/SIEM_UI.png	Task 4	Provides a full overview of the custom real-time SIEM dashboard interface.
EV-010	task4-siem/test_logs/sample_attack.log	Task 4	Contains the synthetic attack data used to test the SIEM parsing rules.

Tip

All screenshots are embedded with technical commentary in their respective task markdown files. Follow the links in the Used In column to view the contextual analysis.