NetSecDen SIEM

Total

—

Critical

—

High

—

Medium

—

Clients

—

Time	Company	Device	Severity	Category	Title	AI

Active Infections

—

Recent (30d)

—

Isolated

—

Stale Endpoints

—

Sites

—

No Coverage

—

Total Findings

—

Last poll: — Endpoints scanned: — Sites: — New findings: —

Site Summary

Site	Active Infections	Recent Infections	Isolated	Stale	Other	Total

Findings

Time	Endpoint	Site	Severity	Type	Detail

Offline Servers

—

Offline Agents

—

Disk Warnings

—

Active Alerts

—

Customers

—

Total Findings

—

Last poll: — Agents scanned: — Alerts scanned: — New findings: —

Customer Summary

Customer	Offline Servers	Offline Agents	Disk Warnings	Active Alerts	Total

Findings

Time	Device	Customer	Severity	Type	Detail

Critical

—

High

—

IPS Events

—

VPN Events

—

Auth Failures

—

Network (UniFi)

—

Total

—

SonicWall Listener: — Received: — Inserted: — UniFi: —

Time	Severity	Category	Event	Detail

📡 Traffic Usage

Total Transferred

—

Outbound (Sent)

—

Inbound (Rcvd)

—

Flows Logged

—

Top Talkers (Source IPs)

IP	Company	Sent	Rcvd	Flows

Top Destinations

IP	Sent	Rcvd	Flows

Protocol Breakdown

Hourly Bandwidth

Critical

—

Sign-in / Identity

Mailbox / BEC

—

License / Users

—

Defender Alerts

—

Total Findings

—

Status: — Last poll: — Users scanned: — New findings: — Pruned: —

Time	Severity	Category	User / Object	Title	Detail

No Microsoft 365 findings yet — configure m365_config.json with an Azure AD app registration to enable this integration

Total Devices

—

Online

—

Offline

—

Servers

—

Workstations

—

Companies

—

Status	Device	Company	Type	OS	CPU	RAM	Disks	IP Address	Last Seen

Select a company and click Generate Report

Total Breaches

—

Critical

—

High

—

Domains

—

Companies

—

HIBP last poll: — Domains checked: — New findings: —

Breach Intelligence (HaveIBeenPwned)

Detected	Severity	Company	Domain	Finding	Detail

No breach intelligence findings yet. Configure hibp_config.json and run a poll to start.

Exposed Services

—

Critical

—

High

—

CVEs

—

IPs Monitored

—

Companies

—

Shodan last poll: — IPs scanned: — New findings: — Resolved: —

Attack Surface (Shodan)

Detected	Severity	Company	IP	Type	Finding	Detail

No attack surface findings yet. Configure shodan_config.json and run a poll to start.

YARA: — Volatility: — Log2timeline: —

Total Jobs

—

Pending / Running

—

YARA Hits

—

Memory Findings

—

Timeline Events

—

Submit New Job

Job Type

Company

Hostname

Files (artifacts, dump, etc.)

Job Queue

Created	Type	Status	Company	Hostname	Findings	Summary / Error	Duration

No forensic jobs yet. Run sift_setup.ps1 on the server, then submit a job above.

Tracked IPs

—

Total Sessions

—

Total Volume

—

Rank	IP Address	Sent	Received	Total	Sessions

Configure which severity levels auto-create a ticket in the helpdesk for each company. Changes save instantly.

Company	Tickets On	■ Critical	■ High	■ Medium	■ Low	Notify Email

AI Computer Agent

Powered by Claude Opus. Diagnoses and fixes Windows issues — system files, printers, memory — and correlates with SIEM findings.

Start New Session

Auto-approve all actions

Registered Endpoints

Sessions

No sessions yet.

Add Company

Company name

Company

Create Company Login

Name

Password

Company

Role

Existing Users

Name	Email	Company	Role	Created

SMS Alert Recipients

Texts critical & high severity findings to these numbers via carrier email gateway.

Name

Mobile (10 digits)

Carrier

Name	Number	Carrier	Enabled

No recipients configured yet.

Recent SMS Alerts

Time	Recipient	Finding

No alerts sent yet.

■ NetSecDen

📡 Traffic Usage

Per Firewall

Top Talkers (Source IPs)

Top Destinations

Protocol Breakdown

Hourly Bandwidth

Suppress Finding

■ NetSecDen

📡 Traffic Usage

Per Firewall

Top Talkers (Source IPs)

Top Destinations

Protocol Breakdown

Hourly Bandwidth