CERT-In Incident Response Runbook and Log Pipeline
Internship role: Security Operations Intern. Collect web, auth and firewall logs, write detection rules for common attacks, and produce an incident runbook that meets the CERT-In six-hour reporting window, tested on a simulated breach.
Internship role: Security Operations Intern. Collect web, auth and firewall logs, write detection rules for common attacks, and produce an incident runbook that meets the CERT-In six-hour reporting window, tested on a simulated breach.
GitHub repo or evidence pack + live demo / report + README + milestone logbook
Stack: Elastic or OpenSearch, Sigma rules, Python
- Scope & method20
Written scope and rules of engagement, and a method that follows a named framework (OWASP, NIST, MITRE ATT&CK).
- Findings quality30
Each finding has steps to reproduce, evidence, a severity rating with reasons, and affected assets.
- Remediation20
Fixes are specific, ranked by risk, and at least one is shown working.
- Evidence & files15
Logs, screenshots, scripts or configs that a reviewer can check.
- Report for a manager15
A one-page summary a non-technical manager can act on.
Pass 60% · Merit 75% · Distinction 90%
Engineering Students
Diploma, B.Tech, B.E., BCA, MCA, or M.Tech students seeking practical experience.
Aspiring Developers
Developers who want to build proof-of-work capstone projects for tech resumes.
Job Seekers
Graduates looking for AI-evaluated code review & verified industry credentials.