SIEM Dashboard

What this demo is about

This demo is part of [KateelLearningDemosToStudents](https://github.com/VinayaSharada/KateelLearningDemosToStudents) by Professor Vinaya Sathyanarayana.

Learning objectives

• Explain the main risk decision that SIEM Dashboard is designed to support.
• Change input assumptions and predict how the output should respond before running the demo.
• Interpret the result in plain language, not just as a number, chart, or AI recommendation.

Run mode and expectations

• Supported modes: Browser
• Starts immediately in browser with no installs, no API keys, and classroom-safe defaults.

Step 1: Inputs

• Start with the default assumptions, then change one variable at a time so students can isolate cause and effect.
• Treat each input as a lever that changes the scenario, baseline, or business context behind the result.

Step 2: Decision buttons

• Use the main run or simulate action to compute the scenario after inputs are set.
• Use export or reset actions, when present, to compare runs or return to a classroom-safe baseline.

Step 3: Outputs and what to notice

• Read the top-line result first, then look for supporting metrics, tables, or narratives that explain why it changed.
• Students should explain whether the output is descriptive, predictive, simulated, or recommended.
• Look for security events, severity, source, and response status
• Observe how event clustering changes analyst priorities