SIEM Alert Simulator Python

A beginner-friendly SOC Analyst project that simulates SIEM alerts, classifies severity, and creates an incident report.

SOC Skills Demonstrated

• SIEM alert triage
• Alert severity classification
• Incident response workflow
• Log analysis concepts
• Python scripting
• Blue Team documentation

Project Files

• siem_alert_simulator.py - Main Python script
• alerts/sample_alerts.json - Sample SIEM alerts
• reports/siem_report.txt - Report created after running the tool
• requirements.txt - Python requirements

What This Tool Simulates

This project simulates common SOC alerts such as brute-force attacks, malware detection, suspicious PowerShell, phishing email reports, privilege escalation, and port scanning.

How to Run

python siem_alert_simulator.py

Why This Project Matters

SOC Analysts use SIEM tools every day to review alerts, assign severity, investigate activity, and document response actions. This project shows that you understand how SIEM alert triage works.