BlueGate

Windows SIEM & Detection Engineering Platform

BlueGate is a Windows-focused SIEM and detection engineering platform currently under development. The project explores Sysmon telemetry, Windows event logging, behavioural detection techniques and threat monitoring.

Current Status

Active Development

Technology Stack

• .NET 8
• Sysmon
• Windows Event Logs
• C#
• GitHub

Project Goals

• Collect and analyse Sysmon events
• Identify suspicious process activity
• Detect unusual network connections
• Map detections to MITRE ATT&CK techniques
• Provide a web-based dashboard

Future Articles

• Building BlueGate - Part 1
• Reading Sysmon Event Logs
• Detecting Suspicious Processes
• Detection Engineering Fundamentals