File size: 41,136 Bytes
6f58d4a
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
<!DOCTYPE html>
<html lang="zh-CN">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>安全事件分析研判平台</title>
    <script src="https://cdn.tailwindcss.com"></script>
    <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css">
    <style>
        .log-entry:hover {
            background-color: #f3f4f6;
            transform: translateY(-1px);
            box-shadow: 0 4px 6px -1px rgba(0, 0, 0, 0.1);
        }
        .severity-critical {
            border-left: 4px solid #ef4444;
        }
        .severity-high {
            border-left: 4px solid #f97316;
        }
        .severity-medium {
            border-left: 4px solid #f59e0b;
        }
        .severity-low {
            border-left: 4px solid #10b981;
        }
        .severity-info {
            border-left: 4px solid #3b82f6;
        }
        .timeline-item:not(:last-child)::after {
            content: '';
            position: absolute;
            left: 19px;
            top: 24px;
            height: 100%;
            width: 2px;
            background-color: #e5e7eb;
        }
        .chart-container {
            height: 300px;
        }
        #correlationGraph {
            height: 400px;
            background-color: #f9fafb;
            border-radius: 0.5rem;
        }
    </style>
</head>
<body class="bg-gray-50">
    <div class="flex h-screen overflow-hidden">
        <!-- 侧边栏 -->
        <div class="hidden md:flex md:flex-shrink-0">
            <div class="flex flex-col w-64 bg-gray-800">
                <div class="flex items-center h-16 px-4 bg-gray-900">
                    <div class="flex items-center">
                        <i class="fas fa-shield-alt text-white mr-2 text-xl"></i>
                        <span class="text-white font-semibold text-lg">安全分析平台</span>
                    </div>
                </div>
                <div class="flex flex-col flex-grow pt-5 overflow-y-auto">
                    <div class="px-4 space-y-1">
                        <a href="#" class="flex items-center px-2 py-2 text-sm font-medium text-white bg-gray-900 rounded-md group">
                            <i class="fas fa-home mr-3 text-gray-300"></i>
                            仪表盘
                        </a>
                        <a href="#" class="flex items-center px-2 py-2 text-sm font-medium text-gray-300 hover:text-white hover:bg-gray-700 rounded-md group">
                            <i class="fas fa-search mr-3"></i>
                            日志分析
                        </a>
                        <a href="#" class="flex items-center px-2 py-2 text-sm font-medium text-gray-300 hover:text-white hover:bg-gray-700 rounded-md group">
                            <i class="fas fa-project-diagram mr-3"></i>
                            关联分析
                        </a>
                        <a href="#" class="flex items-center px-2 py-2 text-sm font-medium text-gray-300 hover:text-white hover:bg-gray-700 rounded-md group">
                            <i class="fas fa-file-alt mr-3"></i>
                            分析报告
                        </a>
                        <a href="#" class="flex items-center px-2 py-2 text-sm font-medium text-gray-300 hover:text-white hover:bg-gray-700 rounded-md group">
                            <i class="fas fa-cog mr-3"></i>
                            系统设置
                        </a>
                    </div>
                </div>
            </div>
        </div>

        <!-- 主要内容区 -->
        <div class="flex flex-col flex-1 overflow-hidden">
            <!-- 顶部导航 -->
            <div class="flex items-center justify-between h-16 px-4 bg-white border-b border-gray-200">
                <div class="flex items-center">
                    <button class="text-gray-500 focus:outline-none md:hidden">
                        <i class="fas fa-bars"></i>
                    </button>
                    <h1 class="ml-4 text-xl font-semibold text-gray-800">安全事件分析研判</h1>
                </div>
                <div class="flex items-center space-x-4">
                    <div class="relative">
                        <button class="p-1 text-gray-400 rounded-full hover:text-gray-500 focus:outline-none">
                            <i class="fas fa-bell"></i>
                        </button>
                        <span class="absolute top-0 right-0 w-2 h-2 bg-red-500 rounded-full"></span>
                    </div>
                    <div class="relative">
                        <button class="flex items-center space-x-2 focus:outline-none">
                            <img class="w-8 h-8 rounded-full" src="https://images.unsplash.com/photo-1472099645785-5658abf4ff4e?ixlib=rb-1.2.1&ixid=eyJhcHBfaWQiOjEyMDd9&auto=format&fit=facearea&facepad=2&w=256&h=256&q=80" alt="">
                            <span class="text-sm font-medium text-gray-700">分析员</span>
                        </button>
                    </div>
                </div>
            </div>

            <!-- 主内容区 -->
            <div class="flex-1 overflow-auto p-4">
                <!-- 筛选条件 -->
                <div class="mb-6 bg-white p-4 rounded-lg shadow">
                    <div class="flex flex-wrap items-center justify-between gap-4">
                        <div class="flex items-center space-x-4">
                            <div>
                                <label for="time-range" class="block text-sm font-medium text-gray-700 mb-1">时间范围</label>
                                <select id="time-range" class="block w-full pl-3 pr-10 py-2 text-base border-gray-300 focus:outline-none focus:ring-indigo-500 focus:border-indigo-500 sm:text-sm rounded-md">
                                    <option>过去24小时</option>
                                    <option selected>过去7天</option>
                                    <option>过去30天</option>
                                    <option>自定义范围</option>
                                </select>
                            </div>
                            <div>
                                <label for="log-source" class="block text-sm font-medium text-gray-700 mb-1">日志来源</label>
                                <select id="log-source" class="block w-full pl-3 pr-10 py-2 text-base border-gray-300 focus:outline-none focus:ring-indigo-500 focus:border-indigo-500 sm:text-sm rounded-md">
                                    <option>全部来源</option>
                                    <option selected>防火墙</option>
                                    <option>IDS/IPS</option>
                                    <option>Windows事件</option>
                                    <option>Linux审计</option>
                                    <option>云日志</option>
                                </select>
                            </div>
                            <div>
                                <label for="severity" class="block text-sm font-medium text-gray-700 mb-1">严重级别</label>
                                <select id="severity" class="block w-full pl-3 pr-10 py-2 text-base border-gray-300 focus:outline-none focus:ring-indigo-500 focus:border-indigo-500 sm:text-sm rounded-md">
                                    <option>全部级别</option>
                                    <option>紧急</option>
                                    <option selected>高+</option>
                                    <option>中+</option>
                                    <option>低+</option>
                                </select>
                            </div>
                        </div>
                        <div class="flex items-center space-x-2">
                            <button class="inline-flex items-center px-4 py-2 border border-transparent text-sm font-medium rounded-md shadow-sm text-white bg-indigo-600 hover:bg-indigo-700 focus:outline-none focus:ring-2 focus:ring-offset-2 focus:ring-indigo-500">
                                <i class="fas fa-filter mr-2"></i> 应用筛选
                            </button>
                            <button class="inline-flex items-center px-4 py-2 border border-gray-300 text-sm font-medium rounded-md shadow-sm text-gray-700 bg-white hover:bg-gray-50 focus:outline-none focus:ring-2 focus:ring-offset-2 focus:ring-indigo-500">
                                <i class="fas fa-sync-alt mr-2"></i> 重置
                            </button>
                        </div>
                    </div>
                </div>

                <!-- 统计信息 -->
                <div class="grid grid-cols-1 md:grid-cols-4 gap-4 mb-6">
                    <div class="bg-white p-4 rounded-lg shadow">
                        <div class="flex items-center justify-between">
                            <div>
                                <p class="text-sm font-medium text-gray-500">总事件数</p>
                                <p class="mt-1 text-2xl font-semibold text-gray-900">1,248</p>
                            </div>
                            <div class="p-3 rounded-full bg-indigo-100 text-indigo-600">
                                <i class="fas fa-list-ol text-xl"></i>
                            </div>
                        </div>
                        <div class="mt-2 flex items-center text-sm text-gray-500">
                            <i class="fas fa-arrow-up text-green-500 mr-1"></i>
                            <span>较昨日增加12%</span>
                        </div>
                    </div>
                    <div class="bg-white p-4 rounded-lg shadow">
                        <div class="flex items-center justify-between">
                            <div>
                                <p class="text-sm font-medium text-gray-500">紧急事件</p>
                                <p class="mt-1 text-2xl font-semibold text-red-600">24</p>
                            </div>
                            <div class="p-3 rounded-full bg-red-100 text-red-600">
                                <i class="fas fa-exclamation-triangle text-xl"></i>
                            </div>
                        </div>
                        <div class="mt-2 flex items-center text-sm text-gray-500">
                            <i class="fas fa-arrow-up text-red-500 mr-1"></i>
                            <span>最近1小时新增3个</span>
                        </div>
                    </div>
                    <div class="bg-white p-4 rounded-lg shadow">
                        <div class="flex items-center justify-between">
                            <div>
                                <p class="text-sm font-medium text-gray-500">关联事件</p>
                                <p class="mt-1 text-2xl font-semibold text-orange-600">8</p>
                            </div>
                            <div class="p-3 rounded-full bg-orange-100 text-orange-600">
                                <i class="fas fa-project-diagram text-xl"></i>
                            </div>
                        </div>
                        <div class="mt-2 flex items-center text-sm text-gray-500">
                            <i class="fas fa-arrow-down text-green-500 mr-1"></i>
                            <span>今日已解决2个</span>
                        </div>
                    </div>
                    <div class="bg-white p-4 rounded-lg shadow">
                        <div class="flex items-center justify-between">
                            <div>
                                <p class="text-sm font-medium text-gray-500">平均响应时间</p>
                                <p class="mt-1 text-2xl font-semibold text-blue-600">42分钟</p>
                            </div>
                            <div class="p-3 rounded-full bg-blue-100 text-blue-600">
                                <i class="fas fa-stopwatch text-xl"></i>
                            </div>
                        </div>
                        <div class="mt-2 flex items-center text-sm text-gray-500">
                            <i class="fas fa-arrow-down text-green-500 mr-1"></i>
                            <span>提升15%</span>
                        </div>
                    </div>
                </div>

                <!-- 主分析区 -->
                <div class="grid grid-cols-1 lg:grid-cols-3 gap-6 mb-6">
                    <!-- 日志列表 -->
                    <div class="lg:col-span-2 bg-white rounded-lg shadow overflow-hidden">
                        <div class="px-4 py-3 border-b border-gray-200 flex justify-between items-center">
                            <h2 class="text-lg font-medium text-gray-900">安全日志</h2>
                            <div class="flex space-x-2">
                                <button class="p-1 text-gray-400 hover:text-gray-500">
                                    <i class="fas fa-columns"></i>
                                </button>
                                <button class="p-1 text-gray-400 hover:text-gray-500">
                                    <i class="fas fa-download"></i>
                                </button>
                            </div>
                        </div>
                        <div class="divide-y divide-gray-200 max-h-[500px] overflow-y-auto">
                            <!-- 日志条目 - 紧急 -->
                            <div class="log-entry p-4 hover:cursor-pointer severity-critical">
                                <div class="flex items-start">
                                    <div class="flex-shrink-0 pt-0.5">
                                        <div class="w-8 h-8 rounded-full bg-red-100 flex items-center justify-center">
                                            <i class="fas fa-fire text-red-600"></i>
                                        </div>
                                    </div>
                                    <div class="ml-3 flex-1">
                                        <div class="flex items-center justify-between">
                                            <p class="text-sm font-medium text-gray-900">多次登录失败尝试</p>
                                            <div class="flex items-center space-x-1">
                                                <span class="px-2 py-1 text-xs font-medium rounded-full bg-red-100 text-red-800">紧急</span>
                                                <span class="text-xs text-gray-500">2分钟前</span>
                                            </div>
                                        </div>
                                        <p class="mt-1 text-sm text-gray-600">从 192.168.1.105 到 admin@example.com (3分钟内15次尝试)</p>
                                        <div class="mt-2 flex items-center space-x-3 text-xs text-gray-500">
                                            <span><i class="fas fa-server mr-1"></i> Web服务器01</span>
                                            <span><i class="fas fa-user mr-1"></i> admin</span>
                                            <span><i class="fas fa-tag mr-1"></i> 暴力破解</span>
                                        </div>
                                    </div>
                                </div>
                            </div>
                            
                            <!-- 日志条目 - 高 -->
                            <div class="log-entry p-4 hover:cursor-pointer severity-high">
                                <div class="flex items-start">
                                    <div class="flex-shrink-0 pt-0.5">
                                        <div class="w-8 h-8 rounded-full bg-orange-100 flex items-center justify-center">
                                            <i class="fas fa-exclamation-circle text-orange-600"></i>
                                        </div>
                                    </div>
                                    <div class="ml-3 flex-1">
                                        <div class="flex items-center justify-between">
                                            <p class="text-sm font-medium text-gray-900">可疑文件下载</p>
                                            <div class="flex items-center space-x-1">
                                                <span class="px-2 py-1 text-xs font-medium rounded-full bg-orange-100 text-orange-800"></span>
                                                <span class="text-xs text-gray-500">15分钟前</span>
                                            </div>
                                        </div>
                                        <p class="mt-1 text-sm text-gray-600">用户从未知来源下载可执行文件 (哈希: a1b2c3d4...)</p>
                                        <div class="mt-2 flex items-center space-x-3 text-xs text-gray-500">
                                            <span><i class="fas fa-desktop mr-1"></i> 工作站-42</span>
                                            <span><i class="fas fa-user mr-1"></i> jsmith</span>
                                            <span><i class="fas fa-tag mr-1"></i> 恶意软件</span>
                                        </div>
                                    </div>
                                </div>
                            </div>
                            
                            <!-- 日志条目 - 中 -->
                            <div class="log-entry p-4 hover:cursor-pointer severity-medium">
                                <div class="flex items-start">
                                    <div class="flex-shrink-0 pt-0.5">
                                        <div class="w-8 h-8 rounded-full bg-yellow-100 flex items-center justify-center">
                                            <i class="fas fa-shield-alt text-yellow-600"></i>
                                        </div>
                                    </div>
                                    <div class="ml-3 flex-1">
                                        <div class="flex items-center justify-between">
                                            <p class="text-sm font-medium text-gray-900">端口扫描检测</p>
                                            <div class="flex items-center space-x-1">
                                                <span class="px-2 py-1 text-xs font-medium rounded-full bg-yellow-100 text-yellow-800"></span>
                                                <span class="text-xs text-gray-500">1小时前</span>
                                            </div>
                                        </div>
                                        <p class="mt-1 text-sm text-gray-600">来自 45.33.22.11 的扫描活动,目标端口 22, 80, 443, 3389</p>
                                        <div class="mt-2 flex items-center space-x-3 text-xs text-gray-500">
                                            <span><i class="fas fa-network-wired mr-1"></i> 边界防火墙</span>
                                            <span><i class="fas fa-tag mr-1"></i> 侦查行为</span>
                                        </div>
                                    </div>
                                </div>
                            </div>
                            
                            <!-- 日志条目 - 低 -->
                            <div class="log-entry p-4 hover:cursor-pointer severity-low">
                                <div class="flex items-start">
                                    <div class="flex-shrink-0 pt-0.5">
                                        <div class="w-8 h-8 rounded-full bg-green-100 flex items-center justify-center">
                                            <i class="fas fa-info-circle text-green-600"></i>
                                        </div>
                                    </div>
                                    <div class="ml-3 flex-1">
                                        <div class="flex items-center justify-between">
                                            <p class="text-sm font-medium text-gray-900">策略违规</p>
                                            <div class="flex items-center space-x-1">
                                                <span class="px-2 py-1 text-xs font-medium rounded-full bg-green-100 text-green-800"></span>
                                                <span class="text-xs text-gray-500">2小时前</span>
                                            </div>
                                        </div>
                                        <p class="mt-1 text-sm text-gray-600">用户访问了受限网站类别: 社交媒体</p>
                                        <div class="mt-2 flex items-center space-x-3 text-xs text-gray-500">
                                            <span><i class="fas fa-desktop mr-1"></i> 工作站-18</span>
                                            <span><i class="fas fa-user mr-1"></i> mjohnson</span>
                                            <span><i class="fas fa-tag mr-1"></i> 策略</span>
                                        </div>
                                    </div>
                                </div>
                            </div>
                            
                            <!-- 日志条目 - 信息 -->
                            <div class="log-entry p-4 hover:cursor-pointer severity-info">
                                <div class="flex items-start">
                                    <div class="flex-shrink-0 pt-0.5">
                                        <div class="w-8 h-8 rounded-full bg-blue-100 flex items-center justify-center">
                                            <i class="fas fa-info text-blue-600"></i>
                                        </div>
                                    </div>
                                    <div class="ml-3 flex-1">
                                        <div class="flex items-center justify-between">
                                            <p class="text-sm font-medium text-gray-900">登录成功</p>
                                            <div class="flex items-center space-x-1">
                                                <span class="px-2 py-1 text-xs font-medium rounded-full bg-blue-100 text-blue-800">信息</span>
                                                <span class="text-xs text-gray-500">3小时前</span>
                                            </div>
                                        </div>
                                        <p class="mt-1 text-sm text-gray-600">用户从 192.168.1.42 (美国 纽约) 登录</p>
                                        <div class="mt-2 flex items-center space-x-3 text-xs text-gray-500">
                                            <span><i class="fas fa-server mr-1"></i> VPN网关</span>
                                            <span><i class="fas fa-user mr-1"></i> dwilliams</span>
                                            <span><i class="fas fa-tag mr-1"></i> 认证</span>
                                        </div>
                                    </div>
                                </div>
                            </div>
                        </div>
                    </div>

                    <!-- 关联分析 -->
                    <div class="bg-white rounded-lg shadow overflow-hidden">
                        <div class="px-4 py-3 border-b border-gray-200">
                            <h2 class="text-lg font-medium text-gray-900">关联分析</h2>
                        </div>
                        <div class="p-4">
                            <div id="correlationGraph" class="flex items-center justify-center">
                                <div class="text-center">
                                    <i class="fas fa-project-diagram text-4xl text-gray-300 mb-2"></i>
                                    <p class="text-gray-500">选择日志进行关联分析</p>
                                    <button class="mt-4 inline-flex items-center px-4 py-2 border border-transparent text-sm font-medium rounded-md shadow-sm text-white bg-indigo-600 hover:bg-indigo-700 focus:outline-none focus:ring-2 focus:ring-offset-2 focus:ring-indigo-500">
                                        <i class="fas fa-magic mr-2"></i> 执行关联分析
                                    </button>
                                </div>
                            </div>
                            
                            <div class="mt-6">
                                <h3 class="text-md font-medium text-gray-900 mb-2">潜在安全事件</h3>
                                <div class="space-y-3">
                                    <div class="p-3 bg-red-50 border border-red-100 rounded-md">
                                        <div class="flex items-start">
                                            <div class="flex-shrink-0 pt-0.5">
                                                <i class="fas fa-exclamation-triangle text-red-500"></i>
                                            </div>
                                            <div class="ml-3">
                                                <p class="text-sm font-medium text-red-800">暴力破解攻击</p>
                                                <p class="mt-1 text-xs text-red-600">来自同一IP对不同服务的多次失败登录尝试</p>
                                            </div>
                                        </div>
                                    </div>
                                    <div class="p-3 bg-orange-50 border border-orange-100 rounded-md">
                                        <div class="flex items-start">
                                            <div class="flex-shrink-0 pt-0.5">
                                                <i class="fas fa-bug text-orange-500"></i>
                                            </div>
                                            <div class="ml-3">
                                                <p class="text-sm font-medium text-orange-800">疑似恶意软件</p>
                                                <p class="mt-1 text-xs text-orange-600">文件下载后伴随异常进程活动</p>
                                            </div>
                                        </div>
                                    </div>
                                </div>
                            </div>
                        </div>
                    </div>
                </div>

                <!-- 事件时间线和报告生成 -->
                <div class="grid grid-cols-1 lg:grid-cols-3 gap-6">
                    <!-- 事件时间线 -->
                    <div class="lg:col-span-2 bg-white rounded-lg shadow overflow-hidden">
                        <div class="px-4 py-3 border-b border-gray-200">
                            <h2 class="text-lg font-medium text-gray-900">事件时间线</h2>
                        </div>
                        <div class="p-4">
                            <div class="space-y-4">
                                <!-- 时间线项目 -->
                                <div class="relative timeline-item pl-8">
                                    <div class="absolute left-0 top-0 w-4 h-4 rounded-full bg-indigo-500 border-4 border-indigo-100"></div>
                                    <div class="text-sm font-medium text-gray-900">检测到暴力破解尝试</div>
                                    <div class="text-xs text-gray-500 mb-1">今天, 09:42</div>
                                    <p class="text-sm text-gray-600">对admin账户的15次失败登录尝试,来源IP: 192.168.1.105</p>
                                </div>
                                
                                <!-- 时间线项目 -->
                                <div class="relative timeline-item pl-8">
                                    <div class="absolute left-0 top-0 w-4 h-4 rounded-full bg-red-500 border-4 border-red-100"></div>
                                    <div class="text-sm font-medium text-gray-900">账户锁定</div>
                                    <div class="text-xs text-gray-500 mb-1">今天, 09:43</div>
                                    <p class="text-sm text-gray-600">Admin账户因多次失败尝试被自动锁定</p>
                                </div>
                                
                                <!-- 时间线项目 -->
                                <div class="relative timeline-item pl-8">
                                    <div class="absolute left-0 top-0 w-4 h-4 rounded-full bg-yellow-500 border-4 border-yellow-100"></div>
                                    <div class="text-sm font-medium text-gray-900">告警发送</div>
                                    <div class="text-xs text-gray-500 mb-1">今天, 09:45</div>
                                    <p class="text-sm text-gray-600">通过邮件和短信通知安全团队</p>
                                </div>
                                
                                <!-- 时间线项目 -->
                                <div class="relative timeline-item pl-8">
                                    <div class="absolute left-0 top-0 w-4 h-4 rounded-full bg-green-500 border-4 border-green-100"></div>
                                    <div class="text-sm font-medium text-gray-900">IP封禁</div>
                                    <div class="text-xs text-gray-500 mb-1">今天, 09:50</div>
                                    <p class="text-sm text-gray-600">192.168.1.105 被加入防火墙黑名单</p>
                                </div>
                                
                                <!-- 时间线项目 -->
                                <div class="relative timeline-item pl-8">
                                    <div class="absolute left-0 top-0 w-4 h-4 rounded-full bg-blue-500 border-4 border-blue-100"></div>
                                    <div class="text-sm font-medium text-gray-900">开始调查</div>
                                    <div class="text-xs text-gray-500 mb-1">今天, 10:15</div>
                                    <p class="text-sm text-gray-600">安全分析师已开始调查该事件</p>
                                </div>
                            </div>
                        </div>
                    </div>
                    
                    <!-- 报告生成 -->
                    <div class="bg-white rounded-lg shadow overflow-hidden">
                        <div class="px-4 py-3 border-b border-gray-200">
                            <h2 class="text-lg font-medium text-gray-900">生成分析报告</h2>
                        </div>
                        <div class="p-4">
                            <form>
                                <div class="mb-4">
                                    <label class="block text-sm font-medium text-gray-700 mb-1">报告类型</label>
                                    <select class="block w-full pl-3 pr-10 py-2 text-base border-gray-300 focus:outline-none focus:ring-indigo-500 focus:border-indigo-500 sm:text-sm rounded-md">
                                        <option>事件报告</option>
                                        <option>日报</option>
                                        <option>周报</option>
                                        <option>威胁情报</option>
                                    </select>
                                </div>
                                
                                <div class="mb-4">
                                    <label class="block text-sm font-medium text-gray-700 mb-1">时间范围</label>
                                    <div class="flex space-x-2">
                                        <input type="date" class="block w-full pl-3 pr-10 py-2 text-base border-gray-300 focus:outline-none focus:ring-indigo-500 focus:border-indigo-500 sm:text-sm rounded-md">
                                        <span class="flex items-center"></span>
                                        <input type="date" class="block w-full pl-3 pr-10 py-2 text-base border-gray-300 focus:outline-none focus:ring-indigo-500 focus:border-indigo-500 sm:text-sm rounded-md">
                                    </div>
                                </div>
                                
                                <div class="mb-4">
                                    <label class="block text-sm font-medium text-gray-700 mb-1">严重级别</label>
                                    <div class="space-y-2">
                                        <div class="flex items-center">
                                            <input id="critical" name="severity" type="checkbox" checked class="h-4 w-4 text-red-600 focus:ring-red-500 border-gray-300 rounded">
                                            <label for="critical" class="ml-2 block text-sm text-gray-700">紧急</label>
                                        </div>
                                        <div class="flex items-center">
                                            <input id="high" name="severity" type="checkbox" checked class="h-4 w-4 text-orange-600 focus:ring-orange-500 border-gray-300 rounded">
                                            <label for="high" class="ml-2 block text-sm text-gray-700"></label>
                                        </div>
                                        <div class="flex items-center">
                                            <input id="medium" name="severity" type="checkbox" class="h-4 w-4 text-yellow-600 focus:ring-yellow-500 border-gray-300 rounded">
                                            <label for="medium" class="ml-2 block text-sm text-gray-700"></label>
                                        </div>
                                        <div class="flex items-center">
                                            <input id="low" name="severity" type="checkbox" class="h-4 w-4 text-green-600 focus:ring-green-500 border-gray-300 rounded">
                                            <label for="low" class="ml-2 block text-sm text-gray-700"></label>
                                        </div>
                                    </div>
                                </div>
                                
                                <div class="mb-4">
                                    <label class="block text-sm font-medium text-gray-700 mb-1">格式</label>
                                    <div class="flex space-x-4">
                                        <div class="flex items-center">
                                            <input id="pdf" name="format" type="radio" checked class="h-4 w-4 text-indigo-600 focus:ring-indigo-500">
                                            <label for="pdf" class="ml-2 block text-sm text-gray-700">PDF</label>
                                        </div>
                                        <div class="flex items-center">
                                            <input id="csv" name="format" type="radio" class="h-4 w-4 text-indigo-600 focus:ring-indigo-500">
                                            <label for="csv" class="ml-2 block text-sm text-gray-700">CSV</label>
                                        </div>
                                        <div class="flex items-center">
                                            <input id="html" name="format" type="radio" class="h-4 w-4 text-indigo-600 focus:ring-indigo-500">
                                            <label for="html" class="ml-2 block text-sm text-gray-700">HTML</label>
                                        </div>
                                    </div>
                                </div>
                                
                                <div class="mt-6">
                                    <button type="submit" class="w-full flex justify-center py-2 px-4 border border-transparent rounded-md shadow-sm text-sm font-medium text-white bg-indigo-600 hover:bg-indigo-700 focus:outline-none focus:ring-2 focus:ring-offset-2 focus:ring-indigo-500">
                                        <i class="fas fa-file-export mr-2"></i> 生成报告
                                    </button>
                                </div>
                            </form>
                        </div>
                    </div>
                </div>
            </div>
        </div>
    </div>

    <script>
        // 简单的交互功能
        document.addEventListener('DOMContentLoaded', function() {
            // 高亮选中的日志条目
            const logEntries = document.querySelectorAll('.log-entry');
            logEntries.forEach(entry => {
                entry.addEventListener('click', function() {
                    logEntries.forEach(e => e.classList.remove('bg-indigo-50'));
                    this.classList.add('bg-indigo-50');
                    
                    // 更新关联图(演示效果)
                    const correlationGraph = document.getElementById('correlationGraph');
                    correlationGraph.innerHTML = `
                        <div class="w-full h-full flex items-center justify-center">
                            <div class="text-center p-4">
                                <div class="relative mx-auto w-64 h-64">
                                    <div class="absolute top-1/2 left-1/2 transform -translate-x-1/2 -translate-y-1/2 w-16 h-16 rounded-full bg-red-500 flex items-center justify-center text-white">
                                        <i class="fas fa-fire"></i>
                                    </div>
                                    <div class="absolute top-8 left-8 w-12 h-12 rounded-full bg-orange-500 flex items-center justify-center text-white">
                                        <i class="fas fa-server"></i>
                                    </div>
                                    <div class="absolute top-8 right-8 w-12 h-12 rounded-full bg-orange-500 flex items-center justify-center text-white">
                                        <i class="fas fa-user-shield"></i>
                                    </div>
                                    <div class="absolute bottom-8 left-8 w-12 h-12 rounded-full bg-yellow-500 flex items-center justify-center text-white">
                                        <i class="fas fa-desktop"></i>
                                    </div>
                                    <div class="absolute bottom-8 right-8 w-12 h-12 rounded-full bg-yellow-500 flex items-center justify-center text-white">
                                        <i class="fas fa-network-wired"></i>
                                    </div>
                                </div>
                                <p class="mt-4 text-sm text-gray-600">显示选定事件之间的关联关系</p>
                                <button class="mt-4 inline-flex items-center px-4 py-2 border border-transparent text-sm font-medium rounded-md shadow-sm text-white bg-indigo-600 hover:bg-indigo-700 focus:outline-none focus:ring-2 focus:ring-offset-2 focus:ring-indigo-500">
                                    <i class="fas fa-chart-line mr-2"></i> 分析模式
                                </button>
                            </div>
                        </div>
                    `;
                });
            });
            
            // 模拟报告生成
            const reportForm = document.querySelector('form');
            if (reportForm) {
                reportForm.addEventListener('submit', function(e) {
                    e.preventDefault();
                    alert('报告生成已开始。完成后您将收到通知。');
                });
            }
        });
    </script>
<p style="border-radius: 8px; text-align: center; font-size: 12px; color: #fff; margin-top: 16px;position: fixed; left: 8px; bottom: 8px; z-index: 10; background: rgba(0, 0, 0, 0.8); padding: 4px 8px;">Made with <img src="https://enzostvs-deepsite.hf.space/logo.svg" alt="DeepSite Logo" style="width: 16px; height: 16px; vertical-align: middle;display:inline-block;margin-right:3px;filter:brightness(0) invert(1);"><a href="https://enzostvs-deepsite.hf.space" style="color: #fff;text-decoration: underline;" target="_blank" >DeepSite</a> - <a href="https://enzostvs-deepsite.hf.space?remix=Mars1107/analyze" style="color: #fff;text-decoration: underline;" target="_blank" >🧬 Remix</a></p></body>
</html>