diff --git a/README.md b/README.md index a4a23d8..eb80b1c 100644 --- a/README.md +++ b/README.md @@ -1 +1,42 @@ -**qapilah account link:**https://qabilah.com/profile/mazenelsayad99/professional-profile +# ☁️ Ghaymah Internship Exam - SecOps Track +**Candidate Name:** Mazen +**Track:** SecOps (Security Operations) + +## 🎯 Project Overview +This repository contains the practical implementations, infrastructure scripts, and postmortem reports for the Ghaymah Internship Exam (SecOps Track). It demonstrates a cloud-native approach to security, focusing on automated auditing, incident response, SIEM log correlation, and disaster recovery. + +## 📂 Repository Structure + +```text +ghaymah-exam-Mazen-SecOps/ +├── q1-deploy-monitor/ +│ ├── security-audit.md # 15-point Cloud Security Audit Checklist +│ └── health-check.sh # Automated bash script for ports, SSL, and permissions +├── q2-postmortem/ +│ └── postmortem-report.md # Incident Response Plan & Timeline for API Brute Force +├── q3-privacy/ +│ ├── privacy-assessment.md # DevTools inspection report for mithal.space +│ └── assets/ # Evidence screenshots for the assessment +├── q4-siem/ +│ ├── analyzer.py # Python-based Log Correlation Analyzer +│ ├── dashboard.html # SIEM Alerts UI +│ └── deployment-plan.md # Block Storage and NGINX deployment strategy +├── q5-ransomware/ +│ └── ransomware-response.md # RTO/RPO strategies and 3-2-1 backup architecture +├── common-mortakaz/ +│ ├── integration.md # Integration proposals +├── common-qabilah/ +│ └── qabilah-profile.txt # Qabilah profile link text file +└── README.md +``` +🔗 Mandatory Requirements (Task B) +✅ Qabilah Network Profile: https://qabilah.com/profile/mazenelsayad99/professional-profile + +🚀 Execution Instructions +To test the Python SIEM (Q4) locally without browser CORS restrictions: +``` +Bash +cd q4-siem +python3 analyzer.py +python3 -m http.server 8000 +# Then open http://localhost:8000/dashboard.html in your web browser \ No newline at end of file