Yazeed Alharbi

graduation project. I led a team of 3 to build a fully functional SIEM system using the ELK Stack (Elasticsearch, Logstash, and Kibana). My main goal as the leader was to design the system’s architecture and ensure we could actually detect real-world cyber attacks by integrating Sigma Rules—which are industry-standard detection patterns. What I did as the Team Leader: • Project Management: I broke down the project into phases (Data collection, Processing, and Dashboarding) and assigned tasks to my teammates based on their strengths. Technical Setup: I personally oversaw the configuration of Logstash to clean the incoming logs and ensured our Elasticsearch was indexing data correctly for fast searching. • Detection Engineering: I was responsible for bringing in Sigma Rules and converting them into Kibana alerts so the system could automatically notify us of any suspicious activity.