Add SIEM

2026-06-27 08:52:17 +00:00
parent 4d51fa97c2
commit ce5af959ad
15 changed files with 414 additions and 18 deletions
@@ -43,6 +43,8 @@ serving/kiosk-app/                         Svelte+Tailwind spaceship-terminal SP
                                          OS-side kiosk runtime stays in files/kiosk/
 serving/dot1x-bench/                      Secure-path bench: step-ca + FreeRADIUS +
                                          hostapd authenticator + TPM enrolment
+serving/siem/                             Wazuh SIEM overlay (audit analysis;
+                                          agentless relay from audit-collector)
 .gitea/workflows/                         Gitea CI: lint -> packer build -> push OCI
 docs/                                     Design PDF and supporting notes
 ```