I taught my laptop to fake cyberattacks — and it's scarily good at it.
Source Reddit Cybersecurity
Discussion
This is an open-source tool named log-generator that creates realistic synthetic SIEM logs simulating multi-stage cyberattacks. It is designed for security professionals to test detection capabilities and security stacks without requiring real breaches or exposing sensitive data. The tool supports multiple log formats and integrates easily with common SIEM platforms. It does not represent an actual vulnerability or active threat but rather a resource for defensive testing.
r/cybersecurity (opens in a new tab)u/MineConsistent51040 points0 comments
Meet log-generator: an open-source tool that spits out realistic SIEM logs so you can test your security stack without waiting for an actual breach to ruin your Friday.
Just shipped a bunch of new toys:
Attack Chains — replay full multi-stage attacks (recon → exploit → exfil), every step mapped to MITRE ATT&CK. Basically a "choose your own villain" adventure for your detection rules.
Benchmark mode — because "it's fast" is not a metric. On my M4 Pro it clocked ~119k logs/sec single-threaded, and ~385k/sec with 4 workers. Your SIEM is now officially the bottleneck.
One-line SIEM integration — set SIEM_HTTP_URL, and logs stream straight into Splunk / Elastic / your tool of choice. No PhD in YAML required.
12 log sources, 4 formats (JSON, syslog, CEF, Wazuh) and Docker-ready so it runs anywhere you can say docker compose up. And its customizable as well, you can add your own format to generate new set of logs
The best part? It's all synthetic. No real users harmed, no PII leaked, no compliance officer crying.
If you're in blue teaming, detection engineering, or just love breaking things responsibly — go kick the tires. ⭐