SARAHAI-SECURITY

1. Overview
SARAHAI-SIEMv1.3 is a desktop-based Security Information and Event Management solution.
It implements:

Multi-layer correlation of events (Local → Distributed → Central)
Automated confidence scoring (including ML classification)
Anomaly detection using an IsolationForest model
A PyQt5-based GUI (tables & charts)
Export of correlated records and anomalies to ODS (OpenDocument Spreadsheet)
Integration with SARAHAI-FWv1.5 (optional) for firewall events