Hii there! I'm a college student currently in my final year and would love to develop a project/product that would be useful in the cybersecurity  domain. However I don't have much access to the real pain points faced by cybersecurity professionals. Here's what I have understood. 

1. Logs are crucial for analysis/threat detection/anomaly detection

2. Logs are huge amount of textual data 

3. IT professionals might find it hard to trace these large amount of logs when something goes wrong

I would love to create a product that would make this process easier. The proposed product would:

1. Parse large amount of logs in real-time from various sources using Drain3 and also would add a semantic embedding phase to it

2. Try to detect anomalies in the logs to find insider threats / data leakage etc (still working on the implementation)

3. Alert the admin and provide a casual graph to trace the issue. 

Does this sound like a product  I can sell to small startups that don't have a large IT infra to make it easier to spot threats faster?

Kindly correct me if I have made any mistakes in my assumptions. Thank you so much for our time