kafSIEM

kafSIEM is an edge-ready operations intelligence tool that monitors Kafka agent traffic and OSINT feeds to build an evidence-linked entity graph stored in SQLite. It provides an analyst workflow through a web desk and a typed OpenAPI, facilitating the tracking of unmanned systems and SCADA infrastructures. Notable features include a configurable analyst desk, domain-specific ontology packs, and a streamlined deployment via Docker without the need for a cluster database.