{
  "id": "lib-process:security-compliance--security-logging-monitoring",
  "_kind": "LibraryProcess",
  "_file": "generated-library/processes.yaml",
  "_cluster": "generated-library",
  "attributes": {
    "displayName": "security-logging-monitoring",
    "description": "Security Logging and Monitoring - Comprehensive SIEM implementation and security log management framework covering\nlog aggregation, correlation rules, threat detection, incident alerting, compliance logging, retention policies, and automated\nresponse to security events using industry-leading SIEM platforms.",
    "libraryPath": "library/specializations/security-compliance/security-logging-monitoring.js",
    "specialization": "security-compliance",
    "references": [
      "- NIST SP 800-92 Guide to Computer Security Log Management: https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-92.pdf\n- CIS Critical Security Controls - Log Management: https://www.cisecurity.org/controls/\n- OWASP Logging Cheat Sheet: https://cheatsheetseries.owasp.org/cheatsheets/Logging_Cheat_Sheet.html\n- Splunk Security Best Practices: https://docs.splunk.com/Documentation/Splunk/latest/Security/\n- Elastic Security: https://www.elastic.co/security\n- Azure Sentinel: https://azure.microsoft.com/en-us/services/azure-sentinel/\n- AWS Security Hub: https://aws.amazon.com/security-hub/\n- MITRE ATT&CK Detection: https://attack.mitre.org/"
    ],
    "example": "const result = await orchestrate('specializations/security-compliance/security-logging-monitoring', {\n  environment: 'production',\n  siemPlatform: 'splunk',\n  logSources: ['aws-cloudtrail', 'kubernetes', 'application-logs', 'firewall', 'ids-ips'],\n  complianceFrameworks: ['SOC2', 'PCI-DSS', 'HIPAA', 'GDPR'],\n  retentionPeriod: 365,\n  threatDetection: true,\n  automatedResponse: true,\n  alertingChannels: ['email', 'slack', 'pagerduty'],\n  dashboardsRequired: true\n});",
    "usesAgents": [
      "siem-architect",
      "log-integration-specialist",
      "log-parser-engineer",
      "log-enrichment-specialist",
      "detection-engineer",
      "threat-detection-specialist",
      "alert-engineer",
      "soar-engineer",
      "compliance-engineer",
      "retention-specialist",
      "dashboard-designer",
      "integrity-specialist",
      "incident-integration-specialist",
      "performance-engineer",
      "compliance-validator",
      "security-tester",
      "documentation-specialist",
      "security-reporter"
    ]
  },
  "outgoingEdges": [
    {
      "from": "lib-process:security-compliance--security-logging-monitoring",
      "to": "domain:security",
      "kind": "lib_applies_to_domain",
      "attributes": {
        "weight": 1
      }
    },
    {
      "from": "lib-process:security-compliance--security-logging-monitoring",
      "to": "role:security-engineer",
      "kind": "lib_involves_role",
      "attributes": {
        "weight": 1
      }
    },
    {
      "from": "lib-process:security-compliance--security-logging-monitoring",
      "to": "workflow:vulnerability-management",
      "kind": "lib_implements_workflow",
      "attributes": {
        "weight": 1
      }
    },
    {
      "from": "lib-process:security-compliance--security-logging-monitoring",
      "to": "specialization:security-compliance",
      "kind": "lib_belongs_to_specialization",
      "attributes": {
        "weight": 0.9
      }
    },
    {
      "from": "lib-process:security-compliance--security-logging-monitoring",
      "to": "lib-agent:cli-mcp-development--dashboard-designer",
      "kind": "uses_agent",
      "attributes": {
        "weight": 0.8
      }
    },
    {
      "from": "lib-process:security-compliance--security-logging-monitoring",
      "to": "lib-agent:software-architecture--performance-engineer",
      "kind": "uses_agent",
      "attributes": {
        "weight": 0.8
      }
    }
  ],
  "incomingEdges": []
}